Thank you for taking the time to report this bug and helping to make Ubuntu better.
As this affects only unusual end-user configurations, it was release noted and a workaround is available, I'm setting this to Importance: Low. I also think it's a stretch to ask for automated mitigation for a deprecated protocol, but I'll stop short of setting this to Won't Fix. I certainly don't expect this request to make any progress without a patch though, and even in that case I'm not sure it'd be accepted. ** Changed in: openssh (Ubuntu) Importance: Undecided => Low -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to openssh in Ubuntu. https://bugs.launchpad.net/bugs/1574415 Title: [16.04] ssh <host>: Bad protocol spec '1' Status in openssh package in Ubuntu: Confirmed Bug description: After upgrade to 16.04 ssh client will not connect to any host, reporting /home/tj/.ssh/config line 109: Bad protocol spec '1'. The entry is: Host ups-01 Hostname 10.254.0.1 User hostmaster IdentityFile ~/.ssh/id_hostmaster IdentitiesOnly yes Protocol 1 If this were an entry in /etc/ssh/ssh_config and the user had no privileges to edit that file it could create a denial of service to the ssh client (if the user doesn't know how to over-ride the config). It would be helpful if the openssh-client postinst script were to grep the standard config files (including for users) and add a warning to the motd and syslog if any invalidated configuration statements are found. This will especially affect connections to embedded devices - in this case it is an ssh server on a management VLAN in one of several network-attached Uninterruptable Power Supplies that cannot be upgraded, and only support Protocol 1. According to the 16.04 Release Notes protocol 1 requires the openssh- client-ssh1 package with the ssh1 binary. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1574415/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
