similar to: [Bug 1213] ssh-keyscan exits in mid-way

https://bugzilla.mindrot.org/show_bug.cgi?id=1213 --- Comment #50 from Daniel Richard G. <skunk at iSKUNK.ORG> --- Okay, tried again with your patch. Here's what I see: [...] # A.B.C.46 SSH-1.99-OpenSSH_4.2 # A.B.C.47 SSH-1.99-OpenSSH_4.2 # A.B.C.47 SSH-1.99-OpenSSH_4.2 # A.B.C.47 SSH-1.99-OpenSSH_4.2 # A.B.C.48 SSH-1.99-OpenSSH_4.2 # A.B.C.48

Fix bug ConnectTimeout=N only works on the first ConnectionAttempts https://bugzilla.mindrot.org/show_bug.cgi?id=2918 --- sshconnect.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/sshconnect.c b/sshconnect.c index 4862da5e..b837a83a 100644 --- a/sshconnect.c +++ b/sshconnect.c @@ -454,11 +454,12 @@ waitrfd(int fd, int *timeoutp) { struct pollfd pfd; struct timeval

ssh-keyscan may, under very specific circumstances, be vulnerable to something akin to a buffer overflow. It's probably impossible to exploit, though, if only because ssh-keyscan is not usually run on very large untrusted input files. ssh-keyscan uses an fgets() wrapper that uses an unsigned int to keep track of the length of a buffer holding the current line. On machines with sufficient

https://bugzilla.mindrot.org/show_bug.cgi?id=1213 aab at purdue.edu changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #2021|0 |1 is obsolete| | --- Comment #34 from aab at purdue.edu 2011-06-14 14:43:42 EST --- Created attachment

https://bugzilla.mindrot.org/show_bug.cgi?id=1213 Damien Miller <djm at mindrot.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |djm at mindrot.org --- Comment #47 from Damien Miller <djm at mindrot.org> --- This should be fixed now (in

https://bugzilla.mindrot.org/show_bug.cgi?id=1213 --- Comment #48 from Daniel Richard G. <skunk at iSKUNK.ORG> --- (In reply to Damien Miller from comment #47) > > There might be a few cases that we've missed, but please give > -current a spin and let us know if it has fixed all keyscan crashes > that you were seeing previously (I think it should...) Hi Damien, thank you

https://bugzilla.mindrot.org/show_bug.cgi?id=1213 Damien Miller <djm at mindrot.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #2197|0 |1 is obsolete| | Assignee|unassigned-bugs at mindrot.org |djm at

https://bugzilla.mindrot.org/show_bug.cgi?id=1213 Damien Miller <djm at mindrot.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |2266 -- You are receiving this mail because: You are watching someone on the CC list of the bug. You are watching

https://bugzilla.mindrot.org/show_bug.cgi?id=1213 Damien Miller <djm at mindrot.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #2533|0 |1 is obsolete| | --- Comment #51 from Damien Miller <djm at mindrot.org>

https://bugzilla.mindrot.org/show_bug.cgi?id=1213 --- Comment #52 from Damien Miller <djm at mindrot.org> --- That patch is committed now - can you retry with -current? -- You are receiving this mail because: You are watching someone on the CC list of the bug. You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1213 --- Comment #53 from Daniel Richard G. <skunk at iSKUNK.ORG> --- (In reply to Damien Miller from comment #52) > That patch is committed now - can you retry with -current? I tried the same snapshot with your revised patch (before seeing the above comment), and got this error two-for-two: [...] # blarg.internal.example.com

https://bugzilla.mindrot.org/show_bug.cgi?id=1213 Damien Miller <djm at mindrot.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #2536|0 |1 is obsolete| | --- Comment #54 from Damien Miller <djm at mindrot.org>

https://bugzilla.mindrot.org/show_bug.cgi?id=1213 --- Comment #55 from Daniel Richard G. <skunk at iSKUNK.ORG> --- I'm not able to apply that last patch without rejections, not to any recent snapshot nor git master. What's your "---" tree? -- You are receiving this mail because: You are watching the assignee of the bug. You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1213 --- Comment #56 from Damien Miller <djm at mindrot.org> --- (--- tree was OpenBSD) I've committed these, as well as a few other fixes. Could you give it another try now? -- You are receiving this mail because: You are watching someone on the CC list of the bug. You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1213 Damien Miller <djm at mindrot.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #2537|0 |1 is obsolete| | --- Comment #58 from Damien Miller <djm at mindrot.org>

https://bugzilla.mindrot.org/show_bug.cgi?id=1213 --- Comment #59 from Daniel Richard G. <skunk at iSKUNK.ORG> --- I see your change was committed to git, so I tested master 46347ed5 without modifications. The scan completes! On two separate runs, scanning the same large network. I am happy to report success :) If I run into another corner case down the line, should I re-open this bug, or

https://bugzilla.mindrot.org/show_bug.cgi?id=1213 Damien Miller <djm at mindrot.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution|--- |FIXED --- Comment #60 from Damien Miller <djm at

https://bugzilla.mindrot.org/show_bug.cgi?id=1213 Damien Miller <djm at mindrot.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED --- Comment #61 from Damien Miller <djm at mindrot.org> --- openssh-6.8 is released -- You are

CentOS Errata and Bugfix Advisory 2012:1213 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-1213.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 1756ea23c8d280a600456caff3a8f444d34d277cf05f1a91d57574ef99124f98 system-config-language-1.3.4-6.el6.noarch.rpm x86_64:

CentOS Errata and Security Advisory 2013:1213 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2013-1213.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 7270b807eaa1e7b12833195f8df9c39e6e36e9c4dc6641dece745553d1d14624 gdm-2.16.0-59.el5.centos.1.i386.rpm