similar to: More NetBSD patches

Hi, the following patches are in the NetBSD packages collection to get OpenSSH 1.2.2 going. Changes: * /dev/urandom may be there but not in the kernel - make sure * Pull in some more headers needed by configure * Add proper ld-flags for ELF platforms * Some code cleanup * Install example files always to a different dir, and use out build system to DTRT WRT getting them to /etc.

In the current implementation, ssh always uses the hostname supplied by the user directly for the SSHFP DNS record lookup. This causes problems when using the domain search path, e.g. I have "search example.com" in my resolv.conf and then do a "ssh host", I will connect to host.example.com, but ssh will query the DNS for an SSHFP record of "host.", not

Description: getnameinfo() (confirmed for CVS version 1.14.2.1) does this sort of buffer size checks (these is just two of many cases): if (strlen(sp->s_name) > servlen) return ENI_MEMORY; strcpy(serv, sp->s_name); ... if (strlen(hp->h_name) > hostlen) {

[caution: this is an IPv6 e-mail address. if you don't have IPv6-capable mail then best keep replies on the list only] > >existing getipnodebyname() call fails with IPv4 on my machine)... > Well, if you can make it work properly - send your patches in, please. The following enhancements to src/net/resolver.c (which looks identical across icecast, ices, libshout, and who knows what

[I'm cc:ing openssl-users at openssl.org, because questions about this are getting there over and over...] There's a problem that several people who installed OpenSSL to be able to uyse OpenSSH have faced: Could not find working SSLeay / OpenSSL libraries, please install I don't recall how SSLeay was installed, but for OpenSSL, there's a glitch in the way it tries to find

It's *very* late here (or very early, depending on how you look at it), so please forgive me if this is incoherent. I thought I'd put this out there and perhaps save a few people some frustration. The configure script is much improved, but I still had problems with the OpenSSL detection. Had to tweak it a bit: *** configure-1.2.3pre1 Sat Mar 11 03:29:00 2000 --- configure Sat Mar 11

[Mod: I am approving this message even though it is just a rehash of known vulnerabilities of DNS. Please in future lets avoid rehashing what was alreadt discussed in probably every single mailing list that deals with UNIX security several years ago? -- alex ] ###### ## ## ###### ## ### ## ## ######

(I'm not subscribed to the list, so if you have any comments, please mail them to me directly.) Thanks for openssh! I downloaded openssh-1.2.2p1 and found I could not configure it on my linux 2.2.15pre13 i686 kernel. The error I got was: configure: error: Could not find working SSLeay / OpenSSL libraries, please install I had previously installed openssl (first 0.9.4 and then 0.9.5) into

Hi, I think I found a minor bug in OpenSSH's log functionality: If a log message which is larger than MSGBUFSIZE=1024 and logged to stderr, then the newline (\r\n) is not printed. This is due to the fact that the newline is added after the log message concatenated with "\r\n" is snprintf'd to another buffer of the same size. If the source buffer (fmtbuf) would already fill the

Hello! The top-level configure.in in the CVS version of Samba uses "echo" instead of the standard AC_MSG_* macros provided by Autoconf. I could not find any reasons for not using AC_MSG_*. "cvs log configure.in" doesn't list any reasons. "cvs annotate configure.in" doesn't work for read-only CVS because the CVS server for Samba is too old! The attached

https://bugzilla.samba.org/show_bug.cgi?id=11813 Bug ID: 11813 Summary: m4/socklen_t.m4 uses obsolete AC_TRY_COMPILE macro Product: rsync Version: 3.1.2 Hardware: All OS: All Status: NEW Severity: trivial Priority: P5 Component: core Assignee: wayned at samba.org

[cc'ed to exports at crypto.com. This patch contains no changes to cryptographic routines, it only changes how the package's configure script works] [I'm not subscribed to this list, please cc me on responses. Thanks] I noticed a minor configure problem in OpenSSH 2.9p2. Basically, configure will check sys/types.h for various "sized" prototypes, and then it separately

All - For those installs on crusty old hardware and OS releases, here are patches to fix two OpenSSH problems on sparc redhat 4.2 systems. 1. `Old PAM' #defines different - build fails with undefined symbols when PAM used. 2. Running ssh on sparc hardware results in bus error on some connection negotiations. Unaligned data on call to inet_ntoa() results in bus error.

Below I've includes a patch which helps build OpenSSH outside from a read-only source tree, find OpenSSL on Mac OS X, and fix a typo. This applies to OpenSSH 2.1.1p4. You should already have gotten a note from Melissa O'Neil about a conflict with the crc32() symbol in zlib, which was causing a crash on Darwin. I've noticed another bug. If ssh is setuid, I get a permission

1. Add support for files >2GB via Paul Eggert's AC_SYS_LARGEFILE macro. This macro is now part of autoconf 2.50. Because of this, "config.h" needs to be included before system headers to get the appropriate defines for LFS support. openbsd-compat/sigact.c configure.in acinclude.m4 2. AIX defines TILDE in <sys/ioctl.h>. Rename to TILDE_CHAR. Feel

https://bugzilla.mindrot.org/show_bug.cgi?id=2688 Bug ID: 2688 Summary: Long log messages to stderr missing newlines Product: Portable OpenSSH Version: 7.4p1 Hardware: All OS: Linux Status: NEW Severity: minor Priority: P5 Component: sshd Assignee: unassigned-bugs at

Tru64 UNIX 4.0D, with the DTK (Desktop Toolkit), includes int64_t in /usr/include.dtk/stdint.h. $ gmake ... (cd openbsd-compat && gmake) gmake[1]: Entering directory `/opt/build/openssh-3.2.3p1/openbsd-compat' cc -O2 -std -I/opt/TWWfsw/tcpwrap/include -I. -I.. -I. -I./.. -I/opt/TWWfsw/libopenssl09s/include -I/opt/TWWfsw/zlib11s/include -DHAVE_CONFIG_H -c bsd-arc4random.c cc: Error:

In passdb-pam.c, I found some bits about const with some PAM data types. Rather than check for each vendor of PAM, better to check for actual const usage ... some vendors have changed const-ness between releases. Also, actually testing constness is great for supporting new implementations that may come out. Here is the autoconf test I use in pam_otp_auth: --8<-- # Check PAM headers for

https://bugzilla.mindrot.org/show_bug.cgi?id=1658 Summary: configure.ac AC_TRY_COMPILE() causes failure with autoconf-2.64 Product: Portable OpenSSH Version: 5.2p1 Platform: Other OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: Build system AssignedTo:

The attached modification to log-server.c add a "tag" to all the syslog output. The tag is a composite of the internal verbose level names used in sshd and the external syslogd names. The form of the tag is as follows. ssh_internal_name(syslog_priority) This might be instructive for a learning sysadmin trying to setup syslog for sshd logging. (I have posted earlier about