Bug#888973: guacd segfaults, error 6 in libcrypto.so.1.1, can't connect via SSH when using PKA

[Fabian Rodriguez]

Package: guacd
Version: 0.9.9-2
Severity: normal

Dear Maintainer,

Guacamole was installed following instructions here: https://wiki.debian.org/Guacamole - this provides guacd 0.9.9-2 from Debian packages and the Guacamole web application binary from the project (as it's broken in Debian, see Bug #887464).

After configuring an SSH connection using public key authentication (PKA), the SSH connection fails. The web interface shows an error indicating "DISCONNECTED - You have been disconnected". /var/log/message shows guacd[728]: segfault at 10 ip 00007f2ea379e935 sp 00007f2e9e259208 error 6 in libcrypto.so.1.1.

The same SSH connection works when PKA is not used (when using password authentication) and was tested as working (both with and w/o PKA) using clients from Debian and from Windows.

Using the latest guacd 0.9.14 version from source worked, I only tested with the 0.9.9 version of the web application (.WAR file from the project site).

This bug is being reported from a system than can reproduce the bug.

To install the latest version from sources, see https://wiki.debian.org/Guacamole#Guacamole_server.2C_from_sources_.28v_0.9.14.29 .


-- System Information:
Debian Release: 9.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-4-amd64 (SMP w/1 CPU core)
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8), LANGUAGE=en_CA:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages guacd depends on:
ii  init-system-helpers  1.48
ii  libc6                2.24-11+deb9u1
ii  libguac11            0.9.9-2
ii  libssl1.1            1.1.0f-3+deb9u1
ii  lsb-base             9.20161125

Versions of packages guacd recommends:
ii  libguac-client-rdp0  0.9.9-2
ii  libguac-client-ssh0  0.9.9-2
ii  libguac-client-vnc0  0.9.9-2

Versions of packages guacd suggests:
pn  libguac-client-telnet0  <none>

-- no debconf information