Quantcast
Channel: Debian User Forums
Viewing all articles
Browse latest Browse all 3474

Bookworm OpenSSH CVE upgrade kept back

$
0
0
Hello

Following the OpenSSH regression bug https://security-tracker.debian.org/tr ... -2024-6387 I have run an apt upgrade of my Debian 12 bookworm machine. However, I notice that the necessary openssh packages have been held back. Here's the output of my apt-get upgrade command

Code:

Reading package lists... DoneBuilding dependency tree... DoneReading state information... DoneCalculating upgrade... DoneThe following packages have been kept back:  openssh-client openssh-server openssh-sftp-server
apt-cache policy openssh-server gives me

Code:

openssh-server:  Installed: 1:9.2p1-2+deb12u2  Candidate: 1:9.2p1-2+deb12u3  Version table:     1:9.2p1-2+deb12u3 500        500 http://security.debian.org/debian-security bookworm-security/main amd64 Packages *** 1:9.2p1-2+deb12u2 500        500 http://deb.debian.org/debian bookworm/main amd64 Packages        100 /var/lib/dpkg/status
So I can see it intends to install the patched 1:9.2p1-2+deb12u3 version but can't.

When I try apt-get --with-new-pkgs upgrade openssh-client openssh-server openssh-sftp-server to install the kept-back packages I get

Code:

Reading package lists... DoneBuilding dependency tree... DoneReading state information... DoneCalculating upgrade... DoneSome packages could not be installed. This may mean that you haverequested an impossible situation or if you are using the unstabledistribution that some required packages have not yet been createdor been moved out of Incoming.The following information may help to resolve the situation:The following packages have unmet dependencies: openssh-client : Depends: libssl3 (>= 3.0.13) but 3.0.11-1~deb12u2 is to be installed openssh-server : Depends: libssl3 (>= 3.0.13) but 3.0.11-1~deb12u2 is to be installedE: Broken packages
Is anyone else having the same problem and/or can suggest how to fix this?

My /etc/apt/sources.list is as follows

Code:

deb http://deb.debian.org/debian/ bookworm main non-free non-free-firmware contribdeb-src http://deb.debian.org/debian/ bookworm main non-free non-free-firmware contribdeb http://security.debian.org/debian-security bookworm-security main deb-src http://security.debian.org/debian-security bookworm-security main deb http://deb.debian.org/debian/ bookworm-updates maindeb-src http://deb.debian.org/debian/ bookworm-updates main
My system was originally installed as Debian 11 (buster) but was upgraded to 12 about 2 months ago.

Statistics: Posted by senyahnoj — 2024-07-03 08:03 — Replies 9 — Views 260



Viewing all articles
Browse latest Browse all 3474

Trending Articles