Re: SECURITY: wget

2011-10-17 Thread Eric Blake
On 10/16/2011 12:04 PM, Yaakov (Cygwin/X) wrote: Eric, wget-1.12 is vulnerable to CVE-2010-2252; please update to the latest upstream release (1.13.4) to fix. While you're at it, may I suggest adding the attached patch to fix the documented location of wgetrc. Thanks for the heads-up. --

Re: SECURITY: gnutls

2011-10-17 Thread Chris Sutcliffe
On 16 October 2011 14:49, Yaakov (Cygwin/X) wrote: Dr. Volker Zell, gnutls 2.8.6 is susceptible to CVE-2009-3555.  This has been fixed since 2.10.0, but the current stable releases are 2.12.11 (ABI-compatible with 2.8.6) and 3.0.4 (which breaks ABI compatibility).  For now, please release

Could not open a connection to your authentication agent.

2011-10-17 Thread wxie
Not sure if this is directly related to the recent update, but after I did the update, I could not open an connect to the ssh agent. The following is what I did: o ssh-agent bash o ssh-add Then the message says: Could not open a connection to your authentication agent. Thanks --Wei --

Re: Could not open a connection to your authentication agent.

2011-10-17 Thread jan.kolar
See this thread: http://cygwin.com/ml/cygwin/2011-10/msg00320.html (not resolved yest but there is workaround with `eval`) -- View this message in context: http://old.nabble.com/Could-not-open-a-connection-to-your-authentication-agent.-tp32667563p32667845.html Sent from the cygwin-xfree

winsup/cygwin ChangeLog sigproc.cc

2011-10-17 Thread cgf
CVSROOT:/cvs/uberbaum Module name:winsup Changes by: c...@sourceware.org 2011-10-17 15:35:26 Modified files: cygwin : ChangeLog sigproc.cc Log message: * sigproc.cc (proc_terminate): Avoid setting ppid to 1 if we're execing. Patches:

winsup/cygwin ChangeLog dcrt0.cc

2011-10-17 Thread cgf
CVSROOT:/cvs/uberbaum Module name:winsup Changes by: c...@sourceware.org 2011-10-17 18:25:04 Modified files: cygwin : ChangeLog dcrt0.cc Log message: * dcrt0.cc (dll_crt0_1): Copy argv before passing to main(). Patches:

Re: cygwin started speaking German today

2011-10-17 Thread Corinna Vinschen
On Oct 16 14:42, Charles Wilson wrote: On 10/11/2011 12:54 PM, Charles Wilson wrote: Consensus does appear to be unanimous on what to do; I just need to review all the postings and figure out exactly /how/ to do it. I have uploaded the new packages. There are three new patches: 1)

Re: /proc/*/cmdline corrupted

2011-10-17 Thread jan.kolar
defaria wrote: Why wouldn't exec(1) be responsible for setting up /proc and therefore fill in cmdline with effectively $0 *before* the program itself ever got around to calling XrmParseCommand? (I'm not well versed in the underlying mechanics here and I have not reviewed the code but I

Re: Problems with mkpasswd and mkgroup

2011-10-17 Thread Kåre Edvardsen
On fr., 2011-10-14 at 10:29 +0200, Corinna Vinschen wrote: On Oct 14 07:39, Edvardsen Kåre wrote: What is the contents of the /etc/password and /etc/group files after you run the mkpasswd/mkgroup commands (as administrator)? What user can log in, but isn't in the password file?

Re: /proc/*/cmdline corrupted

2011-10-17 Thread Corinna Vinschen
On Oct 16 16:59, Andrew DeFaria wrote: On 10/16/11 14:31, jan.kolar wrote: jc807j2668 1 0 08:59 tty0 00:00:00 xterm -e ssh server 80x72+285+0 -e ssh server jc807j3004 1 0 08:59 tty0 00:00:00 xterm -e ssh server 80x72-8+0 -e ssh server jc807j2928 5852 0 09:12 ?

Re: /proc/*/cmdline corrupted

2011-10-17 Thread Corinna Vinschen
On Oct 17 00:41, jan.kolar wrote: defaria wrote: Why wouldn't exec(1) be responsible for setting up /proc and therefore fill in cmdline with effectively $0 *before* the program itself ever got around to calling XrmParseCommand? (I'm not well versed in the underlying mechanics

Re: /proc/*/cmdline corrupted

2011-10-17 Thread jan.kolar
I've checked and on Linux (at least) xterm's command line is not corrupted. That means: unchanged ? Or, with -sl 2000 +tb removed ? A version (!) of xterm on Linux, which does not know +tb option, does not change cmdline. From looking at the xterm code, it would appear that the X

Re: Problems with mkpasswd and mkgroup

2011-10-17 Thread Corinna Vinschen
On Oct 17 10:24, Kåre Edvardsen wrote: On fr., 2011-10-14 at 10:29 +0200, Corinna Vinschen wrote: On Oct 14 07:39, Edvardsen Kåre wrote: What is the contents of the /etc/password and /etc/group files after you run the mkpasswd/mkgroup commands (as administrator)? What user

Re: Gold star please? Re: [ANNOUNCEMENT] Updated: {libiconv/libiconv2/libcharset1}-1.14-2

2011-10-17 Thread Andrew Schulman
On Sun, Oct 16, 2011 at 02:20:31PM -0400, Charles Wilson wrote: The GNU libiconv package provides an iconv() implementation, for use on systems which don't have one, or whose implementation cannot convert from/to Unicode. Can we get a gold star for Chuck here? Supporting libiconv has got

Re: ssh-agent fails to create socket

2011-10-17 Thread Corinna Vinschen
On Oct 14 13:02, Zdzislaw Meglicki wrote: After the latest upgrade (yesterday) I found that ssh-agent no longer works. It looks like if fails to create a socket. Here is an illustration: gustav@Crawley 503 $ ssh-agent bash -l gustav@Crawley 501 $ ls -r /tmp ssh-zHtmAVFZ1412

Re: ssh-agent fails to create socket

2011-10-17 Thread Corinna Vinschen
On Oct 17 11:07, Corinna Vinschen wrote: On Oct 14 13:02, Zdzislaw Meglicki wrote: After the latest upgrade (yesterday) I found that ssh-agent no longer works. It looks like if fails to create a socket. Here is an illustration: gustav@Crawley 503 $ ssh-agent bash -l gustav@Crawley

Re: /proc/*/cmdline corrupted

2011-10-17 Thread jan.kolar
jan.kolar wrote: For example sendmail likes to do that (on Linux): root 3051 sendmail: accepting connections smmsp 3061 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue root 14631 sendmail: server [1.46.244.248] cmd read root 15254

Re: ssh-agent fails to create socket

2011-10-17 Thread jan.kolar
I can reproduce this issue. It's not that it can't create the socket, actually it does so, but for some reason it calls select and, when select returns, it decides to clean up and exit. On modified cygwin 1.7.9-1, the socket does not disappear (until shortly, 5 seconds?, after I type

Re: ssh-agent fails to create socket

2011-10-17 Thread jan.kolar
jan.kolar wrote: I can reproduce this issue. It's not that it can't create the socket, actually it does so, but for some reason it calls select and, when select returns, it decides to clean up and exit. On modified cygwin 1.7.9-1, the socket does not disappear (until shortly, 5

Re: admin privileges when logging in by ssh?

2011-10-17 Thread Andrew Schulman
I applied a patch to CVS which should solve this problem in a generic way. I observed how Windows handles the privileges when creating a token and your scenario should be nicely covered now. Confirmed: with with 2011-10-15 snapshot, all of my privileges are enabled now when I log in with

Re: cygwin started speaking German today

2011-10-17 Thread Charles Wilson
On 10/17/2011 2:59 AM, Corinna Vinschen wrote: On Oct 16 14:42, Charles Wilson wrote: 2) Fixes to the test suite related to the above changes. 3) Adopted Bruno's upstream changes to relocatable.c, turning off expensive relocation support in libintl. Odds of #1 and #2 being adopted upstream

Re: cygwin started speaking German today

2011-10-17 Thread Corinna Vinschen
On Oct 17 09:16, Charles Wilson wrote: On 10/17/2011 2:59 AM, Corinna Vinschen wrote: On Oct 16 14:42, Charles Wilson wrote: 2) Fixes to the test suite related to the above changes. 3) Adopted Bruno's upstream changes to relocatable.c, turning off expensive relocation support in libintl.

Re: ssh-agent fails to create socket

2011-10-17 Thread Corinna Vinschen
On Oct 17 04:08, jan.kolar wrote: jan.kolar wrote: I can reproduce this issue. It's not that it can't create the socket, actually it does so, but for some reason it calls select and, when select returns, it decides to clean up and exit. On modified cygwin 1.7.9-1, the socket does

Re: cygwin started speaking German today

2011-10-17 Thread Corinna Vinschen
On Oct 17 15:51, Corinna Vinschen wrote: On Oct 17 09:16, Charles Wilson wrote: The problem is that Bruno tries to impose Windows over Cygwin. That's not what Cygwin is about. Why can't he accept that? [*] Bruno's option a a) The system can set environment variables that reflect the

cppunint 1.12.1 Aborted (core dumped)

2011-10-17 Thread J- MAN
I'm having a issue with the cppuint framework libray version 1.12.1.  I'm just trying to run a very simple example.  It compiles but crashes with the error Aborted (core dumped).  [J@WN]$g++ -o test MoneyTest.h MoneyTest.cpp MoneyApp.cpp -lcppunit -ldl  [J@WN]$./test.exe  Aborted (core dumped)

Re: /proc/*/cmdline corrupted

2011-10-17 Thread Christopher Faylor
On Mon, Oct 17, 2011 at 10:27:18AM +0200, Corinna Vinschen wrote: On Linux, /proc/$PID/cmdline always contains the full command line as it has been when the process got started, irrespectively of changes after process startup. It looks like the loader creates a copy of the argv array before

Re: 1.7.9-1 Patch command mangles permissions on windows 7

2011-10-17 Thread Andrey Repin
Greetings, Roger Pack! Forgive me if this is a commonly reported bug, but I wasn't sure if other discussions on permissions issues were the same as this issue... $ c:\installs\cygwin\bin\patch.exe -p0 multithread_utilities_trunk.diff (Stripping trailing CRs from patch.) patching file

Re: Where is /bin/nologin

2011-10-17 Thread Andrey Repin
Greetings, Corinna Vinschen! I would advice against giving any clues about account status, for security reasons. It's what Linux' /sbin/nologin' prints, too. Actually it's the whole idea of /sbin/nologin' per the man page: Right you are. However, I haven't seen /bin/nologin used on any

Re: Why 'script' utility require SHELL (and work fine under Linux)?

2011-10-17 Thread Andrey Repin
Greetings, Oleksandr Gavenko! # Where live all profiles... HOME=e:\home HOME is a path to YOUR PERSONAL profile. Not all profiles. You can translate it from %HOMEDRIVE%%HOMEPATH% or %USERPROFILE%, as you prefer. -- WBR, Andrey Repin (anrdae...@freemail.ru) 17.10.2011, 18:24 Sorry for

Re: ssh-agent fails to create socket

2011-10-17 Thread jan.kolar
Another related 'recent update ?' message at cygwin-xfree: http://old.nabble.com/Could-not-open-a-connection-to-your-authentication-agent.-tt32667563.html Not sure if this is directly related to the recent update, but after I did the update, I could not open an connect to the ssh agent --

Re: /proc/*/cmdline corrupted

2011-10-17 Thread jan.kolar
Christopher Faylor-8 wrote: On Mon, Oct 17, 2011 at 10:27:18AM +0200, Corinna Vinschen wrote: On Linux, /proc/$PID/cmdline always contains the full command line as it has been when the process got started, irrespectively of changes after process startup. It looks like the loader creates a

Re: /proc/*/cmdline corrupted

2011-10-17 Thread jan.kolar
Jon Clugston wrote: I tried to reproduce by creating long command lines to other commands and none were corrupted. I tried two now. The first one turned out to be a script around xterm. :-( The second fails the test: xwininfo.exe -display :0 -children tty0 00:00:00 xwininfo -children

[ANNOUNCEMENT] Updated: cppunit-1.12.1-2

2011-10-17 Thread Yaakov (Cygwin/X)
The following package has been updated for the Cygwin distribution: *** cppunit-1.12.1-2 This release has been rebuilt with gcc-4.5. -- Yaakov Cygwin/X CYGWIN-ANNOUNCE UNSUBSCRIBE INFO If you want to unsubscribe from the cygwin-announce mailing list, please

[ANNOUNCEMENT] Updated [security]: wget-1.13.4-1

2011-10-17 Thread Eric Blake (cygwin)
A new release of wget, 1.13.4-1, is available for download, leaving 1.12-1 as previous. NEWS: = This is a new upstream release, with news highlights included below, and including the fix for CVE-2010-2252. See also the package documentation in /usr/share/doc/wget/. DESCRIPTION:

Re: /proc/*/cmdline corrupted

2011-10-17 Thread Jon Clugston
On Mon, Oct 17, 2011 at 12:47 PM, jan.kolar ko...@math.cas.cz wrote: Jon Clugston wrote: I tried to reproduce by creating long command lines to other commands and none were corrupted. I tried two now. The first one turned out to be a script around xterm. :-( The second fails the test:  

Re: Proposal to cygwin.com

2011-10-17 Thread Jon Clugston
On Mon, Oct 17, 2011 at 6:03 PM, Abigail Cox abigail.cox...@googlemail.com wrote: My name is Abigail Cox and I was wondering if you are interested in exchange links, I'll place your link on my sites exactly here: recapturerights(dot)com PR3 saturdaydownsouth(dot)net  PR4 If you agree

Re: Proposal to cygwin.com

2011-10-17 Thread Mark Geisert
[...quoted spam deleted...] What the hell are these e-mails? They are spam. They are dealt with off-line. List convention is not to respond to them and especially not to quote them. Ignore them. ..mark -- Problem reports: http://cygwin.com/problems.html FAQ:

Updated: cppunit-1.12.1-2

2011-10-17 Thread Yaakov (Cygwin/X)
The following package has been updated for the Cygwin distribution: *** cppunit-1.12.1-2 This release has been rebuilt with gcc-4.5. -- Yaakov Cygwin/X CYGWIN-ANNOUNCE UNSUBSCRIBE INFO If you want to unsubscribe from the cygwin-announce mailing list, please

Updated [security]: wget-1.13.4-1

2011-10-17 Thread Eric Blake (cygwin)
A new release of wget, 1.13.4-1, is available for download, leaving 1.12-1 as previous. NEWS: = This is a new upstream release, with news highlights included below, and including the fix for CVE-2010-2252. See also the package documentation in /usr/share/doc/wget/. DESCRIPTION: