[pkg-fso-maint] Bug#532900: dropbear: has no more existent /usr/X11R6/bin/xauth hardcoded

[Jens Seidel]

severity 535630 important
thanks

On Thu, Jul 23, 2009 at 07:25:44PM +0200, Luca Capello wrote:
> severity 532900 important

Did the same on the openssh bug.

> On Fri, 12 Jun 2009 17:58:48 +0200, Axel Beckert wrote:
> > Since x11-common 1:7.4+2, the /usr/X11R6/bin symbolic link is no more
> > shipped with x11-common and therefore /usr/X11R6 is more present in
> > most Sid installations.
> [...]
> > This breaks X forwarding to Sid machines running dropbear as SSH
> > server, because the xauth location is hardcoded as to be at
> > /usr/X11R6/bin/xauth in dropbear's options.h.
> 
> This breaks practically every Openmoko running the default Debian.
> 
> Moreover, since X.Org in Debian moved away from /usr/X11R6 since etch
> (upstream changed with the transition to 7.0 [1]) and IIRC it was a
> Release Goal at that time, this should be at least severity important.
> 
> The same bug applies to OpenSSH (and thus it should be cloned and
> reassigned), look at openssh-5.1p1 [2], look at pathnames.h:137:

I CC:ed the corresponding bug report.

OpenSSH maintainer, please compare with #532900.
 
Jens