Re: Possible Security Hole in SSHD w/ CYGWIN?

2016-02-13 Thread Achim Gratz
David Willis writes: > I know this is a somewhat unique and I guess obscure issue, but if someone > could please look into this - I would be very surprised if it was NOT > reproducible following the steps below. Because if this is actually the case > it is in fact granting permissions that it shoul

[ANNOUNCEMENT] [SECURITY] Updated: p7zip 15.09-2

2016-02-13 Thread Tony Kelman
Version 15.09-2 of the package p7zip is now available in the Cygwin distribution. This is a security bugfix. CHANGES - Includes patch to fix CVE-2015-1038, ref   https://cygwin.com/ml/cygwin-apps/2016-01/msg00055.html DESCRIPTION p7zip is the Unix port of 7-Zip, a file archiver that archives wi

Re: locate and updatedb

2016-02-13 Thread Linda Walsh
Marco Atzeri wrote: On 11/02/2016 19:33, Byron Boulton wrote: On 2/11/2016 1:18 PM, cyg Simple wrote: On 2/11/2016 9:00 AM, Byron Boulton wrote: Does anyone here have success using `updatedb` and `locate` in cygwin? I use `locate` heavily on my Linux machines, but everytime I've tried to run

Segmentation fault with openssh and pkcs11‏

2016-02-13 Thread Evil Medi
Hello Cygwin team When using the openssh client with opensc/pkcs11 I get a segmentation fault. as being discussed here: https://github.com/OpenSC/OpenSC/issues/607 command:  ssh -I C:\\Windows\\System32\\opensc-pkcs11.dll hostname output: Segmentation fault (core dumped) I'm seeing this curren

Re: Segmentation fault with openssh and pkcs11‏

2016-02-13 Thread Achim Gratz
Evil Medi writes: > I'm seeing this currently with openssh_7.1p2 and opensc 0.15.0. I do not > see the same issue with other OSes. Anyone have thoughts on this? Windows and Cygwin DLL don't mix in the manner you expect them to. You'd need to compile OpenSC for Cygwin. Regards, Achim. -- +<[Q+

Re: Segmentation fault with openssh and pkcs11

2016-02-13 Thread Evil Medi
Thanks, I'll give it a go. Regards > Windows and Cygwin DLL don't mix in the manner you expect them to. > You'd need to compile OpenSC for Cygwin. > > > Regards, > Achim. -- Problem reports: http://cygwin.com/problems.html FAQ: htt

Re: name pattern for snapshots has changed

2016-02-13 Thread Achim Gratz
Henri writes: > I selected a 'list' on snapshots and expected to get a list of files. I'v e removed the listings on request of Corinna. There was some problem with the server configuration that we can't fix and the source tree can easily be brwosed via Git (link is provided above the snapshot tab

Re: Last Version of Cygwin for XP

2016-02-13 Thread Corinna Vinschen
On Feb 12 16:58, Erik Soderquist wrote: > On Fri, Feb 12, 2016 at 2:20 PM, Warren Young wrote: > > The last time this topic came up, I came away with the impression that the > > only reason Cygwin hasn’t jettisoned XP support yet is that it’s more work > > than ignoring that old code. > > I have

Re: Last Version of Cygwin for XP

2016-02-13 Thread Tony Kelman
Erik Soderquist gmail.com> writes: > currently I'm studying programming myself now with a direct goal of > being able to write a Linux compatible replacement so I can dump my > own amber-coated XP Have you tried running the Windows binaries under Wine? It's worth a shot. Wine has some hefty depe

[ANNOUNCEMENT] Updated: weechat-1.4-1

2016-02-13 Thread Sébastien Helleu
Version 1.4-1 of "weechat" has been uploaded. ChangeLog and release notes: https://weechat.org/files/changelog/ChangeLog-1.4.html https://weechat.org/files/releasenotes/ReleaseNotes-1.4.html DESCRIPTION WeeChat is a fast, light and extensible chat client. It runs on many platforms like Linux, Un

Re: subversion 1.9.3-1 segfault

2016-02-13 Thread David Rothenberger
On 2/9/2016 9:39 AM, Greg Chicares wrote: > 'svn' segfaulted on a routine command: > > /lmi/mirror/lmi[0]$svn status --show-updates > > svn: E170013: Unable to connect to a repository at URL > 'http://svn.savannah.nongnu.org/svn/lmi/lmi/trunk' > svn: E000104: Error running context: Connection re

[ANNOUNCEMENT] TEST RELEASE: Cygwin 2.5.0-0.3

2016-02-13 Thread Corinna Vinschen
Hi Cygwin friends and users, I released a new Cygwin TEST version 2.5.0-0.3. Apart from a few bugfixes, this new test release introduces a pthread barrier implementation, courtesy of Václav Haisman. It exports the following new functions: - pthread_barrierattr_init, pthread_barrierattr_setpsha

RE: Possible Security Hole in SSHD w/ CYGWIN?

2016-02-13 Thread David Willis
Thanks for taking the time to reproduce this - so now I know its not just me :) And to your point about connecting with a local path vs. a network path, I noticed that too - permissions are correct when accessing anything locally, but when accessing via a network path (even if it is to your own

mktemp() fails on Wine 1.9.3 + Cygwin 2.5.0-0.2

2016-02-13 Thread John Hood
Hi all, I installed wine-staging (i386) 1.9.3 and Cygwin (i386) on my Ubuntu 15.10 laptop in hopes of being able to maintain Cygwin compatibility of some software without having to actually use Windows. I've seen several difficulties, but the most serious one was that gcc would fail with var

Re: mktemp() fails on Wine 1.9.3 + Cygwin 2.5.0-0.2

2016-02-13 Thread John Hood
cygcheck runs OK from CMD, though not under bash. So here is that. regards, --jh Cygwin Configuration Diagnostics Current System Time: Sat Feb 13 15:36:41 2016 Windows 2003 Server Ver 5.2 Build 3790 Service Pack 2 Running under WOW64 on AMD64 Path: C:\windows\system32 C:\window

Re: mktemp() fails on Wine 1.9.3 + Cygwin 2.5.0-0.2

2016-02-13 Thread Qian Hong
Hi John, Thanks a lot for testing Cygwin on Wine. Wine Staging team and I done some Cygwin support work on Wine, we are glad to see people using Cygwin on Wine! However, generic speaking, if Cygwin works on Windows but breaks on Wine, I believe the first place to report is the Wine project. You ar

RE: Possible Security Hole in SSHD w/ CYGWIN?

2016-02-13 Thread David Willis
First of all, it is one thing to ask me why I have set this up the way I did - its another to tell me I've set it up "wrong", especially without known the ins and outs of my domain and network. > You still do not seem to have understood what > > https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-

Re: mktemp() fails on Wine 1.9.3 + Cygwin 2.5.0-0.2

2016-02-13 Thread Qian Hong
I'm not able to debug it right now, but if you have time, I would suggest the following approach: Firstly, get two/three strace logs, one from Cygwin 2.3 + Wine, one from Cygwin 2.5 + Wine, and one from Cygwin 2.5 on Windows if you have Windows. Using vimdiff to compare 1.log, 2.log and 3.log, rem

Re: Possible Security Hole in SSHD w/ CYGWIN?

2016-02-13 Thread Erik Soderquist
On Sat, Feb 13, 2016 at 3:34 AM, Achim Gratz wrote: > David Willis writes: >> I know this is a somewhat unique and I guess obscure issue, but if someone >> could please look into this - I would be very surprised if it was NOT >> reproducible following the steps below. Because if this is actually th

Re: Possible Security Hole in SSHD w/ CYGWIN?

2016-02-13 Thread Erik Soderquist
On Sat, Feb 13, 2016 at 4:15 PM, David Willis wrote: > So you're telling me any user that logs in using key authentication cannot > access the network as the same user (i.e. this is the intended behavior)? If > that's the case wouldn't it be better not to allow network access at ALL, > rather tha

Re: Last Version of Cygwin for XP

2016-02-13 Thread Erik Soderquist
n On Sat, Feb 13, 2016 at 12:41 PM, Tony Kelman wrote: > Erik Soderquist writes: > >> currently I'm studying programming myself now with a direct goal of >> being able to write a Linux compatible replacement so I can dump my >> own amber-coated XP > > Have you tried running the Windows binaries un

RE: Possible Security Hole in SSHD w/ CYGWIN?

2016-02-13 Thread David Willis
Hmm, storing the password in the registry would probably not be optimal... I would probably rather deal with lack of network share access from SSH sessions than store a plaintext password (haven't tested it so I can't say for sure, but since I see no mention of encrypting or hashing the password I'

RE: Possible Security Hole in SSHD w/ CYGWIN?

2016-02-13 Thread David Willis
Also, just wanted to respond to this one piece of the message to clarify - The only change I made to what ssh_host_config does is to use the existing domain admin account cyg_server rather than creating a new local admin account (and it actually detects it automatically if it exists already so this

Re: Possible Security Hole in SSHD w/ CYGWIN?

2016-02-13 Thread Erik Soderquist
On Sat, Feb 13, 2016 at 8:29 PM, David Willis wrote: > Hmm, storing the password in the registry would probably not be optimal... I > would probably rather deal with lack of network share access from SSH > sessions than store a plaintext password (haven't tested it so I can't say > for sure, but si

[ANNOUNCEMENT] Updated: dos2unix 7.3.3-1

2016-02-13 Thread Erwin Waterlander
CHANGES SINCE LAST RELEASE: === New upstream release. * Fixed printing of East-Asian text in Windows Command Prompt on Windows with an East-Asian regional setting. * Fixed printing text in unicode UTF-16 mode on Windows, so that when it is redirected to a fil