From Bugzilla Helper: User-Agent: Mozilla/4.76 [en] (X11; U; Linux 2.2.17-14 i686) When I attempt to open a shell to another machine with 2.3.0p1-4, and previously 2.2.0p1-5, installed I get the following error: xfree: NULL pointer given as argument Reproducible: Always Steps to Reproduce: 1. ssh to another machine with a similar version of SSH installed. 2. 3. Actual Results: [oberon@empress downloads]$ ssh magus xfree: NULL pointer given as argument Expected Results: Should have opened a secure shell on magus. There is no core dump. 2.2.0p1-2 and all previous versions since RedHat 6.2 worked fine on this machine. I can still ssh to a machine with a protocol 1 version of SSH installed: Go Blue% /usr/um/ssh/sbin/sshd --version /usr/um/ssh/sbin/sshd: illegal option -- - sshd version 1.2.27 [sparc-sun-solaris2.6] . . . Here is the failing command with verbose debugging output: [oberon@empress downloads]$ ssh -v -v -v magus SSH Version OpenSSH_2.3.0p1, protocol versions 1.5/2.0. Compiled with SSL (0x0090600f). debug: Reading configuration data /home/oberon/.ssh/config debug: Reading configuration data /etc/ssh/ssh_config debug: Applying options for * debug: ssh_connect: getuid 500 geteuid 0 anon 1 debug: Connecting to magus [10.0.0.11] port 22. debug: Connection established. debug: Remote protocol version 2.0, remote software version OpenSSH_2.3.0p1 debug: no match: OpenSSH_2.3.0p1 Enabling compatibility mode for protocol 2.0 debug: Local version string SSH-2.0-OpenSSH_2.3.0p1 debug: Seeding random number generator debug: send KEXINIT debug: done debug: wait KEXINIT debug: got kexinit: diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 debug: got kexinit: ssh-dss debug: got kexinit: 3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes128-cbc,aes192-cbc,aes256-cbc,rijndael128-cbc,rijndael192-cbc,rijndael256-cbc,rijndael-cbc.se debug: got kexinit: 3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes128-cbc,aes192-cbc,aes256-cbc,rijndael128-cbc,rijndael192-cbc,rijndael256-cbc,rijndael-cbc.se debug: got kexinit: hmac-sha1,hmac-md5,hmac-ripemd160 debug: got kexinit: hmac-sha1,hmac-md5,hmac-ripemd160 debug: got kexinit: none,zlib debug: got kexinit: none,zlib debug: got kexinit: debug: got kexinit: debug: first kex follow: 0 debug: reserved: 0 debug: done debug: kex: server->client blowfish-cbc hmac-sha1 none debug: kex: client->server blowfish-cbc hmac-sha1 none debug: Sending SSH2_MSG_KEX_DH_GEX_REQUEST. debug: Wait SSH2_MSG_KEX_DH_GEX_GROUP. debug: Got SSH2_MSG_KEX_DH_GEX_GROUP. debug: bits set: 1061/2049 debug: Sending SSH2_MSG_KEX_DH_GEX_INIT. debug: Wait SSH2_MSG_KEX_DH_GEX_REPLY. debug: Got SSH2_MSG_KEXDH_REPLY. debug: Host 'magus' is known and matches the DSA host key. debug: bits set: 981/2049 xfree: NULL pointer given as argument debug: Calling cleanup 0x805f3c0(0x0) [oberon@empress downloads]$
Do you have a different version of OpenSSL installed than which OpenSSH was compiled against?
That was the problem. I had the 0.9.6-1 OpenSSL libraries from the RedHat contrib section installed rather than the 0.9.5a-14 which came with RedHat 7.0.
*** This bug has been marked as a duplicate of 20687 ***