similar to: rsync security advisory

----- Forwarded message from Andrea Barisani <lcars at infis.univ.trieste.it> ----- Date: Fri, 2 May 2003 14:01:33 +0200 From: Andrea Barisani <lcars at infis.univ.trieste.it> To: openssh at openssh.com Subject: openssh 3.6.1_p2 problem with pam Hi, I've just updated to openssh 3.6.1_p2 and I notice this behaviour: # ssh -l lcars mybox [2 seconds delay] lcars at mybox's

Hi folks, we've tried contacting Jean-Marc Valin but email address bounces. We published yesterday an advisory about libfishsound, you can find it at the following URL: http://www.ocert.org/advisories/ocert-2008-2.html The issues seems to affect Speex (since the code is the same) versions <= 1.1.12. While the 1.2beta branch is not vulnerable we advise that you fix with a security release

Hello, Questions, observations, and curiosities. Maybe this is something stupid or maybe I'm doing something wrong... But... In light of the Kurt Seifried paper on SSH and SSL, I was looking for the finger prints on my various servers and known hosts files to have a little crib sheet and maybe plug the list into a database on my palm pilot. I found that ssh-keygen lists out the

Hi all. I'm getting the following error when using rsync: nice -n 20 rsync -e "ssh -p30000" --recursive --verbose --verbose --checksum --times --modify-window 2 --port=31000 --dry-run /cygdrive/f/bkp/Doc/Builds/Buildsheets/ MYUSERNAME@MY.SERV.ER.IP:TESTDIR opening connection using ssh -p30000 -l MYUSERNAME MY.SERV.ER.IP rsync --server -vvntrc --modify-window=2 . TESTDIR

Is anyone successfully using the Cygwin rsync on Win2k (or NT4) as both daemon and client, with --delete-after working on the client? I can get --delete to work, but I'd prefer to delete files only on a successful transfer, to ensure that the end-user has a working collection of files, no matter what release. For some reason, --delete-after does nothing for me, even as administrator on the

Is there a way to specify "strict modes = false" on the client side? I'm having trouble getting the client to accept the password file on Windows 2000, since rsync doesn't want the file to be other-readable, but this concept doesn't map too well to Windows. Alternatively, if I could simply set the proper permissions on the passfile, that would suit me fine, but it seems

Ok... This could be cockpit error, but I just don't see it. I've installed OpenSSH 2.1.0 and I can't get X11 forwarding to work. I don't recall having this problem under 1.2.3, but I don't use X11 forwarding often enough to really say that I actually saw it work either. Both sides are running OpenSSH-2.1.0-1 installed from rpm. The client side is running RedHat Linux 6.1

I'm using the binary for irix provided on the site: rsync version 2.5.6 protocol version 26 Copyright (C) 1996-2002 by Andrew Tridgell and others <http://rsync.samba.org/> Capabilities: 64-bit files, socketpairs, hard links, symlinks, batchfiles, no IPv6, 64-bit system inums, 64-bit internal inums The system is an origin 2000 running 6.5.20. I am doing filesystem

Hi, all. This is my first post to the list, so please forgive me if this is an old issue. I scoured the mailing list archives by hand and could find no mention of it, and the official FAQ-o-matic mentions it, but doesn't offer a fix that works for me. I've set up an rsync daemon on Windows NT4 by installing the latest cygwin. Using the cygwin1.dll and rsync.exe, I'm able to connect

All, This may be a simple question, but I can't find the answer... The situation... Clint "C" connects to server "S". On server "S" I can find the client IP (IPv6) address in the SSH_CLIENT environment variable. I also need the client public key. On the client side, the public key ends up added to .ssh/known_hosts but what happens on the server side? I

Hello all, I saw on the Release notes that 2.6.0 is using protocol version 27 which is different than 2.5.7 and 2.5.6. I did a quick peak through the rest of the release notes and quickly browsed the archives on the list and I didn't see any notes on how well 2.6.0 works with older versions of rsync. At our site, we do have 2.5.7 and 2.5.6 installed. Are there any documented problems when

Andrea Barisani a ?crit : > we've tried contacting Jean-Marc Valin but email address bounces. What email address did you use? This email address has always been listed for Speex. > We > published yesterday an advisory about libfishsound, you can find it at the > following URL: > > http://www.ocert.org/advisories/ocert-2008-2.html > > The issues seems to affect

Tevfik On Tuesday 09 Dec 2003 18:13, Tevfik Karag?lle wrote: > I would also like to inform that I updated my cwRsync package with the > latest rsync binary (2.5.7). http://itefix.no/cwrsync I have tried your rsync 2.5.7 in cygwin under Windows 2000, synchronising to a windows share on an unknown (probably Windows) file server. Sorry to report that it hangs at the end of transfer, as did

Hmmm... You guys aware of this project to incorporate Smart Cards into ssh-agent? I remember hearing about some stuff for OpenSSL, but I don't recall hearing about this on the OpenSSH list or on the Muscle list. This would be a really nice thing... :-) Mike -- Michael H. Warfield | (770) 985-6132 | mhw at WittsEnd.com (The Mad Wizard) | (678) 463-0932 |

Hey gang... An SMB server comparison article just showed up at Network Computing. http://www.networkcomputing.com/1104/1104f3.html They compare three SMB servers including Samba 2.0.6 and we took first place (barely). Zinged us on central administration. Compaq's SMB server has central configuration and administration of multiple servers, which they liked a lot, apparently. Mike --

Hi, while compiling the last version of rsync on Solaris 9 SPARC with the GNU CC compiler 3.2.3 I got an error. Standard procedure: cd rsync-2.5.7; configure; make msb@tesla:.../rsync-2.5.7$ make ... gcc -I. -I. -g -O2 -DHAVE_CONFIG_H -Wall -W -c lib/compat.c -o lib/compat.o lib/compat.c: In function `sys_gettimeofday': lib/compat.c:201: too few arguments to function

OpenSSH mailing list, openssh-unix-dev at mindrot.org, added to Cc. On Tue, Jan 16, 2001 at 10:47:59AM -0500, Etienne Lebel wrote: > I try to install openssh-2.3.0p1/2.2.0p4 on a solaris 2.7 and I always got a > core dump with the ssh-keygen. But when I installed the 2.1.1p4 everything > was fine. Why ? That's funny... I can't even get it to compile on Solaris 2.7 with gcc

I'm using server on OpenBSD 3.4 to backuping data from remote server via rsync.On backup server I am install rsync-2.5.6 and on remote machine rsync-2.5.7 (RedHat 8.0) . For backuping data I'm using the following command : rsync -av -e ssh backup@log:/var/backup/ALL-15-Mar.tar /var/backup/3 This command copy file ALL-15-Mar.tar from host log(RedHat box) to local directory on OpenBSD.

Hello all! I didn't see anyone else reply to this, but I also didn't see anything show up on the OpenSSH development list (Cc'ed here). There is a patch call out right now for the pending release of 2.4.0. I'm wondering if anyone is aware of this and if it's already been covered in 2.4.0? Please reply to list and original poster... ----- Forwarded message

Hi all, I'm wanting to make weekly backups of host qin to host elijah. I set a crontab to run a script that effectually executes this rsync command: rsync -ave ssh --exclude-from=excludes.txt --delete / elijah:/home/backup/qin host qin is running gentoo linux with rsync version 2.5.6. host elijah is running debian linux (stable) with rsync version 2.5.7. the excludes.txt file looks like