search for: libldn

...segfaults if the host's key is already recorded in known_hosts. The current head of the master branch is affected too. Builds with --without-ldns don't exhibit the problem, and neither does OpenSSH-7.4p1 (according to git bisect, the commit 523db854 "prefer to use ldns-config to find libldns" introduced the bug). My ssh_config is empty, and I've tested this against a variety of sshd's (including github.com). I'll attach a backtrace; if you need a coredump or information about my build environment, please let me know. -- You are receiving this mail because: You are...

...OS: Mac OS X Status: NEW Severity: critical Priority: P5 Component: ssh Assignee: unassigned-bugs at mindrot.org Reporter: ssanbeg at gmail.com openSSH 8.4p1 as installed by Homebrew still references /usr/local/opt/ldns/lib/libldns.3.dylib, which is now incompatible. ssh fails as does all apps relying upon it. The reference should be /usr/local/opt/ldns/lib/libldns.dylib. -- You are receiving this mail because: You are watching the assignee of the bug.

Hi all. I am experimenting with building OpenSSH server for Android. The attached patch makes OpenSSH successfully build (at least) using Android NDK with libldns. The patch is mostly trivial. The biggest change perhaps is disabling password authentication code. I would like to receive feedback and hopefully get it accepted into the mainline eventually. Regards, Dmitry -------------- next part -------------- A non-text attachment was scrubbed... Name:...

...security Priority: P5 Component: ssh Assignee: unassigned-bugs at mindrot.org Reporter: scott-mindrot at shambarger.net I've been working on getting DNSSEC local validation working on OSX with ldns (see bug 2119), and I see that the code for libresolv and libldns both trust the AD bit in DNS responses for the SSHFP by default. >From RFC 4035 section 4.6, A resolver MUST disregard the meaning of the CD and AD bits in a response unless the response was obtained by using a secure channel or the resolver was specifically configured to regard the m...

I have been running openSSH 7.4p1 for a while now. When I upgraded to 7.5 a year or so ago I ran into the problem listed in this bug report: Bug report: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=218472 The release notes for 7.6 release notes indicate that the fix patch was included: https://www.openssh.com/txt/release-7.6 I tried 7.6 and I still cannot connect without a prompt wondering

https://bugzilla.mindrot.org/show_bug.cgi?id=2119 Bug ID: 2119 Summary: SSHFP with DNSSEC ? no trust anchors given, validation always fails Product: Portable OpenSSH Version: 6.2p1 Hardware: Other OS: Linux Status: NEW Severity: enhancement Priority: P5 Component:

On Thu, Aug 09, 2018 at 08:16:34PM CDT, Damien Miller wrote: >Hi, > >OpenSSH 7.8p1 is almost ready for release, so we would appreciate testing >on as many platforms and systems as possible. This is a bugfix release. AIX 7.1 TL5, C compiler 11.1.0.23 - error in "test_utf8": test_sshbuf:

https://bugzilla.mindrot.org/show_bug.cgi?id=2603 Bug ID: 2603 Summary: Build with ldns and without kerberos support fails if ldns compiled with kerberos support Product: Portable OpenSSH Version: 7.3p1 Hardware: amd64 OS: Linux Status: NEW Severity: normal Priority: P5

...pection. * ssh(1): Fix X11 forwarding on OSX where X11 was being started by launchd. bz#2341 * ssh-keygen(1), ssh(1), sftp(1): Fix output truncation for various that contain non-printable characters where the codeset in use is ASCII. * build: Fix builds that attempt to link a kerberised libldns. bz#2603 * build: Fix compilation problems caused by unconditionally defining _XOPEN_SOURCE in wide character detection. * sshd(8): Fix sandbox violations for clock_gettime VSDO syscall fallback on some Linux/X32 kernels. bz#2142 OpenSSH is brought to you by Markus Friedl, Niels Provos,...

https://bugzilla.mindrot.org/show_bug.cgi?id=3668 Bug ID: 3668 Summary: OpenSSL version header not found Product: Portable OpenSSH Version: 9.6p1 Hardware: ix86 OS: Linux Status: NEW Severity: normal Priority: P5 Component: Build system Assignee: unassigned-bugs at mindrot.org

...pection. * ssh(1): Fix X11 forwarding on OSX where X11 was being started by launchd. bz#2341 * ssh-keygen(1), ssh(1), sftp(1): Fix output truncation for various that contain non-printable characters where the codeset in use is ASCII. * build: Fix builds that attempt to link a kerberised libldns. bz#2603 * build: Fix compilation problems caused by unconditionally defining _XOPEN_SOURCE in wide character detection. * sshd(8): Fix sandbox violations for clock_gettime VSDO syscall fallback on some Linux/X32 kernels. bz#2142 Checksums: ========== - SHA1 (openssh-7.5.tar.gz) = 813...

...PAM support: no OSF SIA support: no KerberosV support: no SELinux support: no S/KEY support: no MD5 password support: no libedit support: no libldns support: no Solaris process contract support: no Solaris project support: no Solaris privilege support: no IP address in $DISPLAY hack: no Translate v4 in v6 hack: yes BSD Auth support: no Random number source:...

...pection. * ssh(1): Fix X11 forwarding on OSX where X11 was being started by launchd. bz#2341 * ssh-keygen(1), ssh(1), sftp(1): Fix output truncation for various that contain non-printable characters where the codeset in use is ASCII. * build: Fix builds that attempt to link a kerberised libldns. bz#2603 * build: Fix compilation problems caused by unconditionally defining _XOPEN_SOURCE in wide character detection. * sshd(8): Fix sandbox violations for clock_gettime VSDO syscall fallback on some Linux/X32 kernels. bz#2142 Checksums: ========== - SHA1 (openssh-7.5.tar.gz) = 813...

Hi, OpenSSH 7.7p1 is almost ready for release, so we would appreciate testing on as many platforms and systems as possible. This is a bugfix release. Snapshot releases for portable OpenSSH are available from http://www.mindrot.org/openssh_snap/ The OpenBSD version is available in CVS HEAD: http://www.openbsd.org/anoncvs.html Portable OpenSSH is also available via git using the instructions at