search for: anongit

Hi, When the Subversion mirror of portable OpenSSH fell into disrepair, I promised to replace it with a git mirror. Well, I finally got around to it - you can clone git://anongit.mindrot.org/openssh.git and browse at https://anongit.mindrot.org/openssh.git/ The repository is also mirrored to github at https://github.com/openssh/openssh-portable These are very new and it's entirely possible that something is broken. Please let me know if this is the case. I'll loo...

Hi, I've migrated the list, bugzilla and anongit servers. With one exception (below), you shouldn't see any difference. If you do then I've messed up and I'd appreciate your letting me know. The list server now runs on different MTA that turned out to be subtly incompatible with the TMDA mail filtering software that provides the abil...

...gs seem to be signed, - HTTPS-accessible source archives include only those that are stable (e.g. https://www.freedesktop.org/software/ModemManager/) and there are no SUMS files signed by anybody. Is it the safest method to git clone from URLs like the following ones? - https://anongit.freedesktop.org/git/ModemManager/ModemManager.git - https://anongit.freedesktop.org/git/libqmi Some of freedesktop's cgit pages suggest to use http:// links. Luckily, same links work with https://. But contrary to the ModemManager's cgit page, the libqmi cgit page doesn't contain t...

Hi All, Actually I am working with the OpenSSH version 6.2p which is vulnerable to above mentioned vulnerabilities (CVE-2016-6210). So am looking for some help how I can fix these vulnerabilities in my version. I need to fix it in the OpenSSH code. Regards Abhishek

Hi there, I noticed that hmac-ripemd160 and hmac-ripemd160 at openssh.com are not listed in the OpenSSH protocols file, yet they are listed in myproposal.h. I was wondering whether this is intentional, if yes, what the rationale behind this is? Thanks, Max

...: [cfa3b8068b09f25037146bfd5eed041b78878bee] Merge tag 'for-linus-hmm' of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma git bisect good cfa3b8068b09f25037146bfd5eed041b78878bee # good: [3fd911b69b3117e03181262fc19ae6c3ef6962ce] Merge tag 'drm-misc-next-2020-05-07' of git://anongit.freedesktop.org/drm/drm-misc into drm-next git bisect good 3fd911b69b3117e03181262fc19ae6c3ef6962ce # bad: [1966391fa576e1fb2701be8bcca197d8f72737b7] mm/migrate.c: attach_page_private already does the get_page git bisect bad 1966391fa576e1fb2701be8bcca197d8f72737b7 # good: [43c8546bcd854806736d8a63...

Greetings, Given the weakness with Diffie-Hellman modp groups less than 2048, is it time to bump the suggested 1024 bit minimum value from the RFC 4419 to a more current 2048 value for OpenSSH 7.0? If so, should this be just a compile-time change, or should there be a new client and server runtime option? Thanks, -- Mark

...-rc1' 'v4.17' # bad: [1c8c5a9d38f607c0b6fd12c91cbe1a4418762a21] Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next git bisect bad 1c8c5a9d38f607c0b6fd12c91cbe1a4418762a21 # bad: [135c5504a600ff9b06e321694fbcac78a9530cd4] Merge tag 'drm-next-2018-06-06-1' of git://anongit.freedesktop.org/drm/drm git bisect bad 135c5504a600ff9b06e321694fbcac78a9530cd4 # good: [5231804cf9e584f3e7e763a0d6d2fffe011c1bce] Merge tag 'leds_for_4.18-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/j.anaszewski/linux-leds git bisect good 5231804cf9e584f3e7e763a0d6d2fffe011c1bce...

.../scalable/Makefile.am | 3 +++ 6 files changed, 18 insertions(+) New commits: commit 797ff16e0578aff66902b701d7bd77351e6eb55d Merge: 6674b8f... 2586d9b... Author: Stephane Loeuillet <leroutier at gmail.com> Date: Mon Oct 29 23:33:23 2007 +0100 Merge branch 'master' of git://anongit.freedesktop.org/git/swfdec/swfdec commit 6674b8f1b2422c5ff90d029db5e949dc94df9dd9 Merge: 0d79a4c... 835f7dd... Author: Stephane Loeuillet <leroutier at gmail.com> Date: Mon Oct 29 22:50:06 2007 +0100 Merge branch 'master' of git://anongit.freedesktop.org/git/swfdec/swfdec com...

Hi Le 17/04/2020 ? 05:52, Damien Miller a ?crit?: > On Wed, 15 Apr 2020, Lo?c wrote: > >> Hello, >> >> In one recent change >> (https://anongit.mindrot.org/openssh.git/commit/?id=2b13d3934d5803703c04803ca3a93078ecb5b715), >> I noticed a regression. >> >> If ssh-keygen is given a private file without passphrase and without the >> corresponding .pub file, I doesn't extract the comment after the commit, >> wh...

...68b09f25037146bfd5eed041b78878bee] Merge tag 'for-linus-hmm' of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma > git bisect good cfa3b8068b09f25037146bfd5eed041b78878bee > # good: [3fd911b69b3117e03181262fc19ae6c3ef6962ce] Merge tag 'drm-misc-next-2020-05-07' of git://anongit.freedesktop.org/drm/drm-misc into drm-next > git bisect good 3fd911b69b3117e03181262fc19ae6c3ef6962ce > # bad: [1966391fa576e1fb2701be8bcca197d8f72737b7] mm/migrate.c: attach_page_private already does the get_page > git bisect bad 1966391fa576e1fb2701be8bcca197d8f72737b7 > # good: [43c8...

https://bugs.freedesktop.org/show_bug.cgi?id=29525 Summary: DVI monitor (via docking station) remains blank Product: xorg Version: git Platform: x86-64 (AMD64) OS/Version: Linux (All) Status: NEW Severity: normal Priority: medium Component: Driver/nouveau AssignedTo: nouveau at

https://bugzilla.mindrot.org/show_bug.cgi?id=2386 Bug ID: 2386 Summary: TERM env variable is always accepted by sshd, regardless the empty AcceptEnv setting Product: Portable OpenSSH Version: 6.8p1 Hardware: Other OS: Linux Status: NEW Severity: enhancement Priority: P5

...HostKeyChecking are set, there is no prompting for confirmation if the connection should be allowed to proceed; I'm unsure if this is by design or not (as presented host key and known host key match), but I'd argue this violates POLA. Attached are two na?ve patches to portable (cloned from anongit at mindrot.org) that attempt to tackle the above. -- /ciao, thorduri.

...nished (14): SSLv3, TLS handshake, Client key exchange (16): SSLv3, TLS change cipher, Client hello (1): SSLv3, TLS handshake, Finished (20): SSLv3, TLS change cipher, Client hello (1): SSLv3, TLS handshake, Finished (20): SSL connection using DHE-RSA-AES128-SHA * Server certificate: * subject: /CN=anongit.freedesktop.org * start date: 2016-02-07 14:25:00 GMT * expire date: 2016-05-07 14:25:00 GMT * SSL: certificate subject name 'anongit.freedesktop.org' does not match target host name 'cgit.freedesktop.org' Because it's breaking a lot of builds :( -------------- next part -----...

...anges. > > v2: > * point Fixes tag to merge commit (Alex) > > Signed-off-by: Thomas Zimmermann <tzimmermann at suse.de> > Reviewed-by: Alex Deucher <alexander.deucher at amd.com> > Fixes: 4e291f2f5853 ("Merge tag 'drm-misc-next-2022-11-10-1' of git://anongit.freedesktop.org/drm/drm-misc into drm-next") I believe the fixes tag should be before the S-o-B ? At least that is the case in most commits and Documentation/process/maintainer-tip.rst example. But you could fix it just before applying. The patch looks good to me. Reviewed-by: Javier Martin...

...that RFC8308 support was added in OpenSSH 7.2, and it specifically calls out both ext-info-s and ext-info-c: "Extension Negotiation in the Secure Shell (SSH) Protocol (ext-info-s, ext-info-c)". However, while ext-info-c was indeed added in 7.2 as part of server-sig-algs support (https://anongit.mindrot.org/openssh.git/commit/?id=76c9fbbe35aabc1db977fb78e827644345e9442e), ext-info-s was only added in 9.6 as part of implementing the ext-info-in-auth at openssh.com extension (https://anongit.mindrot.org/openssh.git/commit/?id=a7ed931caeb68947d30af8a795f4108b6efad761). Could this web page be...

On Wed, Feb 25, 2015 at 09:20:01AM +1100, Darren Tucker wrote: [...] > Sigh. And now the right patch from the tree that compiled. > (djm: I get the idea :-) Tim: is this sufficient to back out the "Work around finicky USL linker" change? https://anongit.mindrot.org/openssh.git/commit/?id=d1db656021d0cd8c001a6692f772f1de29b67c8b > diff --git a/openbsd-compat/bsd-misc.c b/openbsd-compat/bsd-misc.c > index 65e8003..f7be415 100644 > --- a/openbsd-compat/bsd-misc.c > +++ b/openbsd-compat/bsd-misc.c > @@ -31,8 +31,6 @@ > #include &lt...

OK, with this additional information I can now reproduce it. Based on some quick experiments it seems to be triggered when sshd is built --with-ssh1 and the config does not *load* a Protocol 1 host key. Works: Protocol=1,2 + Hostkey not specified Protocol=1,2 + Hostkeys for both protocols specified. Doesn't work: Protocol=2 + Hostkey not specified. Protocol=1,2 + Hostkeys specified only for

https://bugzilla.mindrot.org/show_bug.cgi?id=2304 Bug ID: 2304 Summary: forwarding syntax changed -L a/b/c/d format removed - but not documented Product: Portable OpenSSH Version: 6.7p1 Hardware: Other OS: Linux Status: NEW Severity: normal Priority: P5 Component: