similar to: tcp-wrappers not being used even w/ --with-tcp-wrappers

Howdy, The string of notices on BugTraq about RSAref being vulnerable to overflows has me concerned. After trying to sort through all the messages, I can't figure out whether I need to update OpenSSL (a check of their website indicates no new patches), OpenSSH, both, or neither. I am aware there is no known exploit for it yet. I could be a bad boy and just run all

Howdy, It seems that as of 1.2pre15, ssh-add no longer looks for ssh-askpass in the usual place. (I noticed this both in the source code, ssh-add.c, and to some degree in the ChangeLog.) If you're like me and keep ssh-add in your Autostart folder in KDE, chances are upgrading to 1.2pre15 will result in no longer getting the nice Gnome widget we've come to know and love when

Attached is a small patch that should fix most of the problems reported. I am adding a recommendation to use GNU make to the INSTALL document. Regards, Damien -- | "Bombay is 250ms from New York in the new world order" - Alan Cox | Damien Miller - http://www.mindrot.org/ | Email: djm at mindrot.org (home) -or- djm at ibs.com.au (work) -------------- next part -------------- Index:

Howdy, Well, I finally made it through a complete build of OpenSSH on Solaris 7/x86. I've included a few notes below. Most of them are either simple enough or too complex (i.e. I'm not sure how to do it without breaking other platforms) to generate patches for here. 1) _PATH_DEVNULL, _PATH_UTMP and _PATH_WTMP aren't defined anywhere, since Solaris doesn't appear

Howdy, The following patch should be applied if you're building a SuSE-style RPM with the spec file included in the pre15 tarfile. I've made some changes since the copy that went out with pre15, and I've been a little lax in sending the updates up. Namely, one of the fixes includes not making symlinks part of the package itself. They are now done with a postinstall

Attached is a spec file for OpenSSH on SuSE 6.4 and 7.0 systems. It differs from the current spec file in the following details: - Only one rpm file is created containing client and server files. - PreReq `openssl-devel' is changed to `openssl'. - Path '/usr/libexec/ssh' is changed to '/usr/lib/ssh' for ssh-askpass and gnome-ssh-askpass. The resulting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I have just uploaded openssh-1.2pre15 to http://violet.ibs.com.au/openssh/ Changes: - Merged big source cleanup from OpenBSD CVS. All the source now conforms to: http://www.openbsd.org/cgi-bin/man.cgi?query=style&apropos=0&sektion=9&manpath=OpenBSD+Current&format=html - Added BSD compatible install program - More

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I have just uploaded openssh-1.2pre16 to: http://violet.ibs.com.au/openssh This is mainly a bugfix release, it should fix some of the recurrent compile problems that have been reported to the mailing list and to me (the __P() stuff on Solaris for example). Full changelog: 19991207 - sshd Redhat init script patch from Jim Knoble <jmknoble at

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I have just uploaded 1.2.1pre22 to: http://violet.ibs.com.au/openssh/files/ This release consists of portability fixes and cleanups. It also resolves two issues which may have caused security problems - If you OS header files did not define PATH_STDPATH, then an unsafe path was used by default (it contained an implicit '.'). Thanks

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I have just uploaded 1.2.1pre22 to: http://violet.ibs.com.au/openssh/files/ This release consists of portability fixes and cleanups. It also resolves two issues which may have caused security problems - If you OS header files did not define PATH_STDPATH, then an unsafe path was used by default (it contained an implicit '.'). Thanks

Hi all. It's nice to see that AIX support (unintentionally?) is getting better and better. :) Attached is a patch against pre14 that fixes AIX support. All that is left, basically, is a replacement for the /dev/urandom way of getting entropy. ... A completely different thing... how about DCE support? I was thinking of adding some dce code to sshd that: 1. Attaches credentials based on

Hi, This patch fixes a couple of small items in 1.2.pre14: 1. It's ssh-askpass, not scp that was moved to $(libexecdir)/ssh. 2. Make sure that $(libexecdir) exists. --- openssh-1.2pre14/ChangeLog~ Mon Nov 22 08:11:23 1999 +++ openssh-1.2pre14/ChangeLog Mon Nov 22 09:48:15 1999 @@ -60,7 +60,7 @@ - EGD uses a socket, not a named pipe. Duh. - Fix includes in fingerprint.c - Fix scp

Can anyone using PAM and rsa-rhosts authentication replicate this? Damien -------------- next part -------------- An embedded message was scrubbed... From: Adrian Baugh <adrian at merlin.keble.ox.ac.uk> Subject: Serious Bug Report: OpenSSH Date: Wed, 1 Dec 1999 02:38:56 +0000 (GMT) Size: 3926 Url:

With the sshd in recent releases of OpenSSH, some Red Hat Linux systems complain about ulimit trying to raise a limit when logging in via ssh. The problem is that packages/redhat/sshd.pam doesn't do limit checking for an sshd session. The attached patch adds the pam_limits module to the sshd session, which checks for limits set in /etc/security/limits.conf. This works on Red Hat Linux 5.2

Hi, This patch fixes a couple of small ``problems'' in 1.2pre17 Makefile.in: 1. Avoid making an empty $(libexecdir)/ssh directory. 2. Don't try to uninstall $(mandir)/man1/slogin.1 twice. --- openssh-1.2pre17/Makefile.in~ Thu Dec 9 00:48:58 1999 +++ openssh-1.2pre17/Makefile.in Thu Dec 9 06:51:41 1999 @@ -92,9 +92,9 @@ -rm -f $(mandir)/man1/slogin.1 ln -s ssh.1

The scp program from openssh-1.2.2p1 behaves different from the scp program from ssh-1.2.27. In ssh-1.2.27 you can copy one or more file(s) to a remote users home directory using the command: scp filename(s) user at remotehost In openssh-1.2.2p1 this copies the file(s) to a file named "user at remotehost" in the current (local) directory. To copy the files to the wanted (remote)

Hi, After fixing the --with-tcp-wrappers problem I decided to look closer at configure.in and found that --with-md5-passwords didn't work either. This patch fixes both problems (remember to run autoconf.) diff -ur openssh-1.2pre14.orig/configure.in openssh-1.2pre14/configure.in --- openssh-1.2pre14.orig/configure.in Mon Nov 22 06:11:05 1999 +++ openssh-1.2pre14/configure.in Mon Nov 22

Hello all, Just joined this mailing list -- not sure if this is the right list to send this question, but I have a question about cross-compiling R. I am working with R-1.9.1.tgz. It may just be with my version of mingw32, but it seems that expm1 is not defined, so I tried to ensure that HAVE_EXPM1 was #undef'ed before cross-compiling. The problem is that, in <include/Rmath.h> if

In my latest patch, I hardcoded the port NUT uses for TCP communication (3493). The reason is, that I can't figure out a way how to change the numeric value of the #define'd PORT into a character string. Using snprintf() and a temporary buffer just seems wrong, since this should be handled by the preprocessor, rather than at runtime. The following files are affected: - server/conf.c (line

Hi, This patch adds a BSD compatible install script (copied from gcc-2.95.2) to 1.2pre14. The script has a X-style license. The script will be used if configure doesn't find a proper install program on the system. Remember to run autoconf and set execute (755) permissions for install-sh when the patch has been applied. -- Niels Kristian Bech Jensen -- nkbj at image.dk --