similar to: [Bug 3069] New: sftp issues with [ or ] in path name

Hi folks. We were made aware of a MITRE CVE assignment on OpenSSH for a remote DoS in sftp, described as: The (1) remote_glob function in sftp-glob.c and the (2) process_put function in sftp.c in OpenSSH 5.8 and earlier, as used in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, OpenBSD 4.7, and other products, allow remote authenticated users to cause a denial of service (CPU and memory consumption) via

https://bugzilla.mindrot.org/show_bug.cgi?id=3054 Bug ID: 3054 Summary: sftp -R num_requests allows num_requests+1 Product: Portable OpenSSH Version: 8.0p1 Hardware: All OS: All Status: NEW Severity: minor Priority: P5 Component: sftp Assignee: unassigned-bugs at mindrot.org

https://bugzilla.mindrot.org/show_bug.cgi?id=2049 Priority: P5 Bug ID: 2049 Assignee: unassigned-bugs at mindrot.org Summary: Request for a configurable option for SFTP to display login information to the user after a successful login. Severity: enhancement Classification: Unclassified

Hello all Im using sftp 1:4.7p1-8ubuntu1.2 in a batchjob Ive noticed that sftp needs a long time for sending a filelist. The timespan increases exponential if many files are on the remoteserver. for example "ls -la *.txt" needs 10 seconds for 2000 files but needs 50 seconds for 4000 files. For 150.000 Files i have to wait 15 minutes for example but the

Is there anyone actively working on adding recursive operations to sftp? I've got a recent snapshot of the source (Dec 6th), and I see extended options for ls and the inclusion of history, both of which are welcome, but there doesn't seem to be any hint of recursive operation support. If there are people working quietly on recursive op patches, I'd like to hear from you. I've

I just did a bit of testing on OpenBSD and there the above setup seems to work and I can remove the files just fine over sftp. So this thing should work but there's still something causing it to fail on CentOS's side. One difference between our CentOS and OpenBSD is that OpenBSD uses newer openssh server. I looked through the release notes and didn't see any changes related to

Hi Patrick, thanks for the pointers. I tried today, and while it was easy to start my first container, I am not really happy with LXD, exactly for the reason St?phane gives in https://stgraber.org/2016/03/11/lxd-2-0-introduction-to-lxd-112/ "How does LXD relate to Docker/Rkt?"... what I really like about docker and docker-compose is, that it encourages to separate code from data and

Hi I have just purchased a Cyberpower CP1300EPFCLCD UPS. It is not listed in your Compatibility List http://networkupstools.org/stable-hcl.html I am very new to all this but do have a background in IT. I have been retired for 18 years so am a bit out of touch so please excuse if I am a bit fuzzy. I will try my best to explain my issue below. When I plug my UPS into my Synology NAS

I am running two Red Hat 6.2 servers with the 2.2.16 kernel. I am running OpenSSH_2.9.9p2 (SSH proto 2) and OpenSSL 0.9.5a 1 on both with no problems. I am having problems upgrading to OpenSSH 3.0.2p1 on both systems. After doing a gnu make installation, ssh works fine, but sftp displays fourteen digit numbers instead of file names when you do an ls listing of directory contents. File transfers

Hello Patrick, >On 7/3/19 8:21 AM, Sven Schwedas via samba wrote: >> Though I'm not sure if docker is the right tool for the job; samba as a >> fat daemon running a bazillion subprocesses orchestrated by a >> persistent database that's very sensitive to instances leaving and >> joining the domain seems the antithesis to docker's philosophy. >>

On 7/3/19 8:21 AM, Sven Schwedas via samba wrote: > Though I'm not sure if docker is the right tool for the job; samba as a > fat daemon running a bazillion subprocesses orchestrated by a persistent > database that's very sensitive to instances leaving and joining the > domain seems the antithesis to docker's philosophy. > Docker would be a terrible choice for this;

On 7/4/19 12:49 PM, Joachim Lindenberg wrote: > * I am not (yet) familiar with LXD or nspawn. Do you have any pointer on how Samba DC works with LXD? > I've only used LXD for containerizing web applications so far.

Hi, I have trouble setting up chrooted SFTP for our user. I got the basic SFTP chroot working, user is chrooted to its home directory, I've added /home/userb/etc directory with dummy passwd, group and localtime files. The problem is that instead of only accessing its own files, I need the user to be able to remove another users files. I have web application which runs as different user, the

https://bugzilla.mindrot.org/show_bug.cgi?id=3422 Bug ID: 3422 Summary: sftp UID/GID output issue about arguments in the command line Product: Portable OpenSSH Version: 8.0p1 Hardware: Other OS: Linux Status: NEW Severity: enhancement Priority: P5 Component: scp

On Mon, Aug 10, 2015 at 09:50:04PM +0100, Mark Clarkson wrote: > Hi, > I noticed that libvirt-lxc will be deprecated for RedHat: > > "Future development on the Linux containers framework is now based on the > docker command-line interface. libvirt-lxc tooling may be removed in a > future release of Red Hat Enterprise Linux (including Red Hat Enterprise > Linux 7) and

On Mon, Aug 10, 2015 at 09:50:04PM +0100, Mark Clarkson wrote: >Hi, >I noticed that libvirt-lxc will be deprecated for RedHat: > >"Future development on the Linux containers framework is now based on >the docker command-line interface. libvirt-lxc tooling may be removed >in a future release of Red Hat Enterprise Linux (including Red Hat >Enterprise Linux 7) and should not

Hello friends, I have a script that uses the sftp client to transfer a file to another server using PK authentication. It was working until I upgraded from OpenSSH 2.5.1p1 to 2.5.2p2-1 yesterday (on a RH Linux 6.2 system). The sftp command is: sftp -o "IdentityFile ~/.ssh/id_dsa" \ $PUSERNAME@$PSERVER >$TEMPFILE 2>&1 <<-! cd $PDIR put $DOC_ARCHIVE ls quit !

https://bugzilla.mindrot.org/show_bug.cgi?id=3109 Bug ID: 3109 Summary: Failure when sftp-server writes big data chunks on Windows Product: Portable OpenSSH Version: 8.1p1 Hardware: Other OS: Windows 10 Status: NEW Severity: enhancement Priority: P5 Component:

Dear all, I'm moving my first baby steps with libvirt-lxc trying to convert over from an LXD installation and one of the hurdles is putting together an image. All the examples I found about libvirt-lxc refer to running /bin/sh in a container, almost as if it was docker, as opposed to run a "full system" like I've been doing with lxd. Also virt-install, often referred in libvirt

This applies to the OpenBSD --current tree. Don't see why it shouldn't work under portable. Within the patch are the updates I need to make before I'll actually submit it for real, but I figured I'd make a public drop. Since I'm not on this list anymore keep me in the CC: if you want me to respond. I'll continue to work as time permits, but it would be nice if people