[ANNOUNCEMENT] Updated: libssh2_1, libssh2-devel, mingw64-{x86_64, i686}-libssh2 1.10

2021-09-05 Thread Cygwin libssh2 Maintainer
The following packages have been upgraded in the Cygwin distribution:

* libssh2_1 1.10
* libssh2-devel 1.10
* mingw64-x86_64-libssh21.10
* mingw64-i686-libssh2  1.10

libssh2 is a library implementing the SSH2 protocol, supporting many features.

The Mingw packages provide Mingw MS VC RT-linked binaries, NOT Cygwin binaries,
for use with the mingw64-{x86_64,i686}-gcc cross compilers, installed in
/usr/{x86_64,i686}-w64-mingw32/sys-root/mingw/{bin,lib,include}/.

For more information see the project home page:

https://libssh2.org/

As there are many changes each release please see below or read
/usr/share/doc/libssh2/RELEASE-NOTES after installation for details:

https://libssh2.org/changes.html


libssh2 1.10

This release includes the following enhancements and bugfixes:

 o adds agent forwarding support
 o adds OpenSSH Agent support on Windows
 o adds ECDSA key support using the Mbed TLS backend
 o adds ECDSA cert authentication
 o adds diffie-hellman-group14-sha256, diffie-hellman-group16-sha512,
   diffie-hellman-group18-sha512 key exchanges
 o adds support for PKIX key reading when using ed25519 with OpenSSL
 o adds support for EWOULDBLOCK on VMS systems
 o adds support for building with OpenSSL 3
 o adds support for using FIPS mode in OpenSSL
 o adds debug symbols when building with MSVC
 o adds support for building on the 3DS
 o adds unicode build support on Windows
 o restores os400 building
 o increases min, max and opt Diffie Hellman group values
 o improves portiablity of the make file
 o improves timeout behavior with 2FA keyboard auth
 o various improvements to the Wincng backend
 o fixes reading partial packet replies when using an agent
 o fixes Diffie Hellman key exchange on Windows 1903+ builds
 o fixes building tests with older versions of OpenSSL
 o fixes possible multiple definition warnings
 o fixes potential cast issues _libssh2_ecdsa_key_get_curve_type()
 o fixes potential use after free if libssh2_init() is called twice
 o improved linking when using Mbed TLS
 o fixes call to libssh2_crypto_exit() if crypto hasn't been initialized
 o fixes crash when loading public keys with no id
 o fixes possible out of bounds read when exchanging keys
 o fixes possible out of bounds read when reading packets
 o fixes possible out of bounds read when opening an X11 connection
 o fixes possible out of bounds read when ecdh host keys
 o fixes possible hang when trying to read a disconnected socket
 o fixes a crash when using the delayed compression option
 o fixes read error with large known host entries
 o fixes various warnings
 o fixes various small memory leaks
 o improved error handling, various detailed errors will now be reported
 o builds are now using OSS-Fuzz
 o builds now use autoreconf instead of a custom build script
 o cmake now respects install directory
 o improved CI backend
 o updated HACKING-CRYPTO documentation
 o use markdown file extensions
 o improved unit tests


-- 
Problem reports:  https://cygwin.com/problems.html
FAQ:  https://cygwin.com/faq/
Documentation:https://cygwin.com/docs.html
Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple


Updated: libssh2_1, libssh2-devel, mingw64-{x86_64, i686}-libssh2 1.10

2021-09-05 Thread Cygwin libssh2 Maintainer
The following packages have been upgraded in the Cygwin distribution:

* libssh2_1 1.10
* libssh2-devel 1.10
* mingw64-x86_64-libssh21.10
* mingw64-i686-libssh2  1.10

libssh2 is a library implementing the SSH2 protocol, supporting many features.

The Mingw packages provide Mingw MS VC RT-linked binaries, NOT Cygwin binaries,
for use with the mingw64-{x86_64,i686}-gcc cross compilers, installed in
/usr/{x86_64,i686}-w64-mingw32/sys-root/mingw/{bin,lib,include}/.

For more information see the project home page:

https://libssh2.org/

As there are many changes each release please see below or read
/usr/share/doc/libssh2/RELEASE-NOTES after installation for details:

https://libssh2.org/changes.html


libssh2 1.10

This release includes the following enhancements and bugfixes:

 o adds agent forwarding support
 o adds OpenSSH Agent support on Windows
 o adds ECDSA key support using the Mbed TLS backend
 o adds ECDSA cert authentication
 o adds diffie-hellman-group14-sha256, diffie-hellman-group16-sha512,
   diffie-hellman-group18-sha512 key exchanges
 o adds support for PKIX key reading when using ed25519 with OpenSSL
 o adds support for EWOULDBLOCK on VMS systems
 o adds support for building with OpenSSL 3
 o adds support for using FIPS mode in OpenSSL
 o adds debug symbols when building with MSVC
 o adds support for building on the 3DS
 o adds unicode build support on Windows
 o restores os400 building
 o increases min, max and opt Diffie Hellman group values
 o improves portiablity of the make file
 o improves timeout behavior with 2FA keyboard auth
 o various improvements to the Wincng backend
 o fixes reading partial packet replies when using an agent
 o fixes Diffie Hellman key exchange on Windows 1903+ builds
 o fixes building tests with older versions of OpenSSL
 o fixes possible multiple definition warnings
 o fixes potential cast issues _libssh2_ecdsa_key_get_curve_type()
 o fixes potential use after free if libssh2_init() is called twice
 o improved linking when using Mbed TLS
 o fixes call to libssh2_crypto_exit() if crypto hasn't been initialized
 o fixes crash when loading public keys with no id
 o fixes possible out of bounds read when exchanging keys
 o fixes possible out of bounds read when reading packets
 o fixes possible out of bounds read when opening an X11 connection
 o fixes possible out of bounds read when ecdh host keys
 o fixes possible hang when trying to read a disconnected socket
 o fixes a crash when using the delayed compression option
 o fixes read error with large known host entries
 o fixes various warnings
 o fixes various small memory leaks
 o improved error handling, various detailed errors will now be reported
 o builds are now using OSS-Fuzz
 o builds now use autoreconf instead of a custom build script
 o cmake now respects install directory
 o improved CI backend
 o updated HACKING-CRYPTO documentation
 o use markdown file extensions
 o improved unit tests



Re: cygrunsrv + sshd + rsync = 20 times too slow -- throttled?

2021-09-05 Thread Brian Inglis

On 2021-09-05 02:18, Achim Gratz wrote:

04.09.2021 18:45, Brian Inglis:
[...]

then to install all binary packages for dogfooding:


Would you please stop telling folks to do things that potentially breaks 
their systems?


There are quite a few more steps to take if you want to emulate what 
setup does.  Then again you cannot do that on a live Cygwin system 
unless you _really_ know what exactly it is you're doing and which 
packages can or cannot be touched that way.


This is a downside of having only a general and not also a "technical" 
mailing list to discuss and diagnose "technical" issues and approaches.
The suggestion was intended as a tip to ensure *complete* locally 
rebuilt package contents are installed, by folks who are already having 
issues with their installation, rebuilding Cygwin and packages, and 
replacing the Cygwin dll etc. and packages to diagnose those issues. So 
hopefully they are also aware of preremove and postinstall scripts, in 
packages where they are provided, and the /etc/setup/PKG.lst.gz 
manifests for files to be removed before installation, and provided 
after installation. For the latter I would expect technical folks to 
make use of them but leave them to Cygwin Setup programs for officially 
released package upgrades.


[Also some of us do not have the appropriate technical background and 
expertise to get a Cygwin overlay mirror working reliably from the 
available instructions (if it was easy enough, someone would have 
provided a local-overlay-mirror package to do it years ago), nor systems 
fast enough to run Cygwin Setup for every package install.
Due to Windows "improvements", my system upgraded a few years ago is 
just as "fast" as the 10 year old system it replaced. ;^>
Cygwin Setup upgrades can take as long as Windows Update installing the 
latest patches.
Some of my approaches, suggestions, and participation here are coloured 
by those limitations (also by expensive, slow, uncompetitive networks).]


--
Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada

This email may be disturbing to some readers as it contains
too much technical detail. Reader discretion is advised.
[Data in binary units and prefixes, physical quantities in SI.]

--
Problem reports:  https://cygwin.com/problems.html
FAQ:  https://cygwin.com/faq/
Documentation:https://cygwin.com/docs.html
Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple


Re: mmap failure [was: cygrunsrv + sshd + rsync = 20 times too slow -- throttled?]

2021-09-05 Thread Ken Brown via Cygwin

On 9/4/2021 8:04 PM, Ken Brown via Cygwin wrote:

On 9/4/2021 6:58 PM, Ken Brown via Cygwin wrote:

On 9/4/2021 6:54 PM, Ken Brown via Cygwin wrote:

On 9/4/2021 6:37 PM, Ken Brown via Cygwin wrote:

I've reduced the procps failure to the following test case:

$ cat mmap_test.c
#include 
#include 
#include 

int
main ()
{
   void *addr;
   int page_size = getpagesize ();

   addr = mmap (0, page_size, PROT_READ | PROT_WRITE,
    MAP_PRIVATE | MAP_ANONYMOUS, -1, 0);
   if (addr == MAP_FAILED)
 perror ("mmap");
}

$ gcc mmap_test.c

$ ./a
mmap: Invalid argument

This happens if I use cygwin1.dll built from the current git master.  But it 
also happens if I build from cygwin-3_2_0-release with the recent patches 
applied that make Cygwin build without error:


0e12b4939 Cygwin: C++17: register keyword is deprecated
a7340e0c0 Cygwin: dumper: fix up GCC pragma for g++ 11.2
2a212c086 Cygwin: workaround a g++ 11.2 initialization bug
9e3f1737e Cygwin: loader script: add DWARF 5 sections
bdfd2b004 Cygwin: testsuite: avoid "conflicting types" gcc warning
6fc498e2e strstr: avoid warnings
26da270b2 ldexp/ldexpf: avoid assembler warning
edce2a557 Cygwin: fix declaration of RtlInitEmptyUnicodeString


Sorry, those commit ids are wrong.  They're what I got after rebasing the 
master branch so that those commits come first.


[Pressed Send too soon.]

Here are the correct commits:

8169e39ab Cygwin: C++17: register keyword is deprecated
3ca80b360 Cygwin: dumper: fix up GCC pragma for g++ 11.2
bdb7991db Cygwin: workaround a g++ 11.2 initialization bug
801120c1f Cygwin: loader script: add DWARF 5 sections
d5cc66426 Cygwin: testsuite: avoid "conflicting types" gcc warning
c2fe205b5 strstr: avoid warnings
76c2c7a89 ldexp/ldexpf: avoid assembler warning
eeeb5650c Cygwin: fix declaration of RtlInitEmptyUnicodeString



So there appears to be something wrong with cygwin1.dll built with the 
current build tools (gcc 11.2.0, binutils 2.37, not sure what else is 
relevant).


Wait a minute...I'll bet this is related to the MEM_EXTENDED_PARAMETER 
initialization problem that was dealt with in commit bdb7991db.


More data: When I run the test case under gdb, it succeeds.  When I run it under 
strace, I see VirtualAlloc2 in fhandler_dev_zero::mmap failing with windows 
error 87.


Ken

--
Problem reports:  https://cygwin.com/problems.html
FAQ:  https://cygwin.com/faq/
Documentation:https://cygwin.com/docs.html
Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple


[ANNOUNCEMENT] Updated: weechat-3.2.1-1

2021-09-05 Thread Sébastien Helleu
Version 3.2.1-1 of "weechat" has been uploaded.

It fixes a security vulnerability, for more info, see:
https://weechat.org/doc/security/

ChangeLog:

https://weechat.org/files/changelog/ChangeLog-3.2.1.html

DESCRIPTION
WeeChat is a fast, light and extensible chat client. It runs on many platforms
like Linux, Unix, BSD, GNU Hurd, Mac OS X and Windows (bash/ubuntu and
cygwin).

HOMEPAGE
https://weechat.org/

Sébastien Helleu.

-- 
Problem reports:  https://cygwin.com/problems.html
FAQ:  https://cygwin.com/faq/
Documentation:https://cygwin.com/docs.html
Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple


Updated: weechat-3.2.1-1

2021-09-05 Thread Sébastien Helleu
Version 3.2.1-1 of "weechat" has been uploaded.

It fixes a security vulnerability, for more info, see:
https://weechat.org/doc/security/

ChangeLog:

https://weechat.org/files/changelog/ChangeLog-3.2.1.html

DESCRIPTION
WeeChat is a fast, light and extensible chat client. It runs on many platforms
like Linux, Unix, BSD, GNU Hurd, Mac OS X and Windows (bash/ubuntu and
cygwin).

HOMEPAGE
https://weechat.org/

Sébastien Helleu.


Re: cygrunsrv + sshd + rsync = 20 times too slow -- throttled?

2021-09-05 Thread Achim Gratz

04.09.2021 18:45, Brian Inglis:
[...]

then to install all binary packages for dogfooding:


Would you please stop telling folks to do things that potentially breaks 
their systems?


There are quite a few more steps to take if you want to emulate what 
setup does.  Then again you cannot do that on a live Cygwin system 
unless you _really_ know what exactly it is you're doing and which 
packages can or cannot be touched that way.



--
Achim.

(on the road :-)


--
Problem reports:  https://cygwin.com/problems.html
FAQ:  https://cygwin.com/faq/
Documentation:https://cygwin.com/docs.html
Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple