similar to: [tftp-hpa] [BUG] Bad src address on replies from aliased interfaces

Hi, I'd like to know if there is any chance to get bug 1153 fixed soon ? It seems like a trivial issue, a patch is provided, and it's a pain for us to manually patch every new release -- this was reported as a portable-specific bug, but also affects vanilla openssh. The bug is described at http://bugzilla.mindrot.org/show_bug.cgi?id=1153 Simon -- Simon Vallet Ing?nieur

Hi, we're currently considering making use of RFC4255 SSHFP records, but are hitting a problem with a 4.4p1 client running on Tru64 5.1A: [...] debug3: verify_host_key_dns DNS lookup error: out of memory [...] No matching host key fingerprint found in DNS. A 4.3p2 linux client gives the following : [...] debug3: verify_host_key_dns debug1: found 1 insecure fingerprints in DNS debug1:

Hi, as discussed before, we're trying to make use of SSHFP records (RFC 4255) to publish host key fingerprints in the DNS. However, some non-OpenBSD platforms don't support DNSSEC in the native resolver (e.g. glibc), which renders the whole thing quite useless, since openssh correctly requires the RRs to be signed and validated. The following patch adds support for ldns, an external

So as of recent kernels, this change helps: http://git.kernel.org/?p=network/tftp/tftp-hpa.git;a=commitdiff;h=c6d2c36b1a2b1986cab7aebb72d120fa118bdfeb But there is still a flaw. Notably, if tftpd is running with AF_UNSPEC (as it will if ipv6 support is desired), myrecvfrom will fail to setsockopt to get the data back on the first pass. I'd guess the least disruptive change to get to be

https://bugzilla.mindrot.org/show_bug.cgi?id=1285 Simon Vallet <svallet at genoscope.cns.fr> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |svallet at genoscope.cns.fr --- Comment #5 from Simon Vallet <svallet at genoscope.cns.fr> 2009-12-07

OpenSSH depends heavily upon OpenSSL. Both cleanly build 64 bit binaries. In the case of sparcv9 binaries, you should probably make sure you have *both* 32bit and 64bit OpenSSL binaries installed, and take extra care to configure your so library paths. On systems that are 100% 64bit, (Linux, FreeBSD in my experience) it just works. On Feb 28, 2006, at 9:23 AM, openssh-unix-dev-request at

Hi, we encounter a problem using PAM with privsep to manage OPIE authentication : in some -- not really reproducible -- cases, the child responsible of PAM authentication stalls and continues to run even if its parent has been closed. The server is the standard RHEL 4 install, which is a 3.9p1 with backported security patches As this children account for the 'MaxStartups' limit, new

Kirtland Air Force Base has denied approval for the use of R on its Windows network. Some of their objections seem a bit strange, but some appear to be legitimate. In particular, they have detected registry "vulnerabilities" which are detailed in the attachment. I know nothing about Windows registry vulnerabilities. If any of these issues are legitimate concerns,

I want to compile tftp-hpa on libc5 because we have many systems still using this library. There were some constants missing that i copied from glibc-2.1 headers, and now I'm left with this and I don't know what to do since all I can do is copy/paste, not touch real code :-) === gcc -O2 -m486 -fno-strength-reduce -D_XPG4_2 -D_XOPEN_SOURCE -D__EXTENSIONS__ -D_BSD_SOURCE -D_ISO9X_SOURCE

http://bugzilla.mindrot.org/show_bug.cgi?id=1320 Summary: Add support for ldns Product: Portable OpenSSH Version: -current Platform: Other OS/Version: Linux Status: NEW Severity: enhancement Priority: P2 Component: ssh AssignedTo: bitbucket at mindrot.org ReportedBy: svallet at

http://bugzilla.mindrot.org/show_bug.cgi?id=1153 svallet at genoscope.cns.fr changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED ------- Comment #3 from svallet at genoscope.cns.fr

Hello, I want to make a fuzzy classification from a dissimilarity matrix (calculated with daisy from package 'cluster'). I have tried to use fanny (package cluster) but I have the same problems than described in a previous message (http://tolstoy.newcastle.edu.au/R/help/05/05/4546.html) i.e. it always gives me two clusters in the results (even if k is different from 2) with the same

Hello, I'm looking for a R function proceeding MRPP (Multi-Response Permutation Procedures). Is it available? Thanking you in anticipation, Jeanne Vallet, PhD student [[alternative HTML version deleted]]

Hi, Now that it's possible to run tftp non interactively, it would be nice to get a non zero exit status in case of failure. Currently exit status is always 0, which makes tftp usage in scripts a bit inconvenient, as one has to parse its output. Thanks. Please CC me, as I'm not on the list. Felix.

I have observed that the tftp-hpa-0.48 tftp client sends an ACK in case it receives an error message from a tftp server. Inspecting the source code confirms this behaviour. According to the tftp RFC (RFC 1350), Sect. 2, server error messages should not be acknowledged by the client: "Most errors cause termination of the connection. An error is signalled by sending an error packet. This

Dear tftp-hpa'ers, We are migrating from Solaris 2.8 to RHEL 4.6 64 bit. So are in the process of migrating our Solaris 2.8 tftp servers (as well as lots of other servers) to the latest tftp-hpa version available to RHEL 4 users: tftp-server-0.39-3.el4.x86_64.rpm. Since this version was made available roughly a year ago would guess it probably contains roughly the same fixes as your version

http://bugzilla.mindrot.org/show_bug.cgi?id=1153 Summary: DISPLAY should be set form the connected IP, not the hostname Product: Portable OpenSSH Version: 4.3p1 Platform: All OS/Version: All Status: NEW Severity: normal Priority: P2 Component: sshd AssignedTo: bitbucket at

We just started playing round with tftp-hpa and we are very happy! The issue that is prompting me to write this is that we would like to use the remap file, but are having a hard time getting the syntax correct. I have searched the web and mailing list archive (only back to when the list moved to it's current location), but have not been able to find any examples. Would somebody be so kind

Hello, I am attempting pxelinux via dhcpd/tftpd. If I use the system default tftpd daemon, then pxelinux loads but then complains about the tsize option. I've downloaded tftp-hpa-0.34, compiled and installed. I also edited inetd.conf according to README.security and then reloaded inetd. /tftpboot directory and all files and directories have nobody:nobody for permissions with at least read

Hello, I have pushed out a 0.43 release of tftp-hpa. This release has a couple of low-risk changes; I have a few more substantial changes in the pipeline, and I wanted to push these out first. Changes in 0.43: Fix double-free error on ^c in client. Try to deal with clients that send TFTP requests to broadcasts (apparently some recent Sun boxes do this instead of using the address told by