Re: ssh server vulnerable to regreSSHion?

2024-07-04 Thread Brian Inglis via Cygwin
On 2024-07-04 09:31, Tom Kent via Cygwin wrote: For anyone not aware, a major, remotely exploitable, vulnerability has been found in OpenSSH servers. It has been assigned CVE-2024-6387 [1] and titled "regreSSHion" [2] because it is actually a regression of a pair of early 2000s bugs: CVE-2006-50

ssh server vulnerable to regreSSHion?

2024-07-04 Thread Tom Kent via Cygwin
For anyone not aware, a major, remotely exploitable, vulnerability has been found in OpenSSH servers. It has been assigned CVE-2024-6387 [1] and titled "regreSSHion" [2] because it is actually a regression of a pair of early 2000s bugs: CVE-2006-5051 and CVE-2008-4109. The vulnerability is a race

mount nfsdir ; cd /cygdrive/y ; ls -l ; cd / ; umount nfsdir # causes kernel VNetRoot to be stuck...

2024-07-04 Thread Roland Mainz via Cygwin
Hi! - AFAIK we found a resource or Win32 object refcount leak: If I do a $ mount nfsdir_as_Y ; cd /cygdrive/y ; ls -l ; cd / ; umount Y: #, the the VNetRoot used by the filesystem's kernel module is not finalised (e.g. |MRxFinalizeVNetRoot()| is not being called). If I do the same with just W