RE: [SECURITY] p7zip: CVE-2015-1038

2016-02-12 Thread Tony Kelman
> You probably need to connect to cygwin.com with ssh on the command line > once in order to accept the prompt about the changed (or unknown) host > key. You can then rely on cygport's canned use of ssh again. Bingo, that was it! Thanks Achim! `ssh cygwin.com` to add the known host and everything

Re: [SECURITY] p7zip: CVE-2015-1038

2016-02-12 Thread Achim Gratz
Tony Kelman writes: > I'm not very familiar with the intricacies of ssh auth options, as you > can probably guess. I tried removing ~/.ssh/known_hosts (backing up to > a different file name) but no change. Is there a cygport or sftp or ssh > option via command line or environment variable that I ca

RE: [SECURITY] p7zip: CVE-2015-1038

2016-02-10 Thread Tony Kelman
> What means "NMU"? Sorry, that's a Debian term for "non-maintainer upload." I don't know if we ever do those in Cygwin? > Recently the default configuration has been changed to only have hashes > in that file. You could change it back or use ssh management commands > to remove the existing entri

Re: [SECURITY] p7zip: CVE-2015-1038

2016-02-10 Thread Achim Gratz
Tony Kelman writes: > Thanks for the help Corinna. > > I don't have anything for sourceware or cygwin.com in > ~/.ssh/known_hosts, should I? Recently the default configuration has been changed to only have hashes in that file. You could change it back or use ssh management commands to remove the

Re: [SECURITY] p7zip: CVE-2015-1038

2016-02-10 Thread Corinna Vinschen
ey to compare the host against > > to disallow MITM attacks. > > Hm okay, what's the best way to get this fixed then? Generate new > ssh keys? Or someone else can NMU this since it's a security issue, > my cygport including the new patch is at > https://github.com/tkel

RE: [SECURITY] p7zip: CVE-2015-1038

2016-02-09 Thread Tony Kelman
. Hm okay, what's the best way to get this fixed then? Generate new ssh keys? Or someone else can NMU this since it's a security issue, my cygport including the new patch is at https://github.com/tkelman/cygwin-p7zip -Tony

Re: [SECURITY] p7zip: CVE-2015-1038

2016-02-09 Thread Corinna Vinschen
On Feb 8 17:42, Tony Kelman wrote: > >> Tony@LAPTOP-O230JCFF ~/github/cygwin-p7zip > >> $ cygport p7zip-15.09-2.cygport upload > >>>>> Uploading p7zip-15.09-2.x86_64 > >>>>> Running lftp sftp://cyg...@cygwin.com > >&g

RE: [SECURITY] p7zip: CVE-2015-1038

2016-02-08 Thread Tony Kelman
>> Tony@LAPTOP-O230JCFF ~/github/cygwin-p7zip >> $ cygport p7zip-15.09-2.cygport upload >>>>> Uploading p7zip-15.09-2.x86_64 >>>>> Running lftp sftp://cyg...@cygwin.com >> Password: >> cd: Fatal error: Host key verification failed > ^^^

Re: [SECURITY] p7zip: CVE-2015-1038

2016-02-08 Thread Corinna Vinschen
main list?) > > $ eval `ssh-agent` > Agent pid 12848 > > Tony@LAPTOP-O230JCFF ~/github/cygwin-p7zip > $ ssh-add > Enter passphrase for /home/Tony/.ssh/id_rsa: > Identity added: /home/Tony/.ssh/id_rsa (/home/Tony/.ssh/id_rsa) > Identity added: /home/Tony/.ssh/id_dsa (/hom

Re: [SECURITY] p7zip: CVE-2015-1038

2016-01-30 Thread Tony Kelman
P-O230JCFF ~/github/cygwin-p7zip $ ssh-add Enter passphrase for /home/Tony/.ssh/id_rsa: Identity added: /home/Tony/.ssh/id_rsa (/home/Tony/.ssh/id_rsa) Identity added: /home/Tony/.ssh/id_dsa (/home/Tony/.ssh/id_dsa) Tony@LAPTOP-O230JCFF ~/github/cygwin-p7zip $ cygport p7zip-15.09-2.cygport upload >&g

RE: [SECURITY] p7zip: CVE-2015-1038

2016-01-29 Thread Tony Kelman
> Tony, > > A directory traversal vulnerability has been reported in p7zip-15.09. > Could you please spin a new release with the following patch: > > http://pkgs.fedoraproject.org/cgit/rpms/p7zip.git/plain/p7zip-15.09-CVE-2015-1038.patch > > -- > Yaakov Ack, will do

[SECURITY] p7zip: CVE-2015-1038

2016-01-29 Thread Yaakov Selkowitz
Tony, A directory traversal vulnerability has been reported in p7zip-15.09. Could you please spin a new release with the following patch: http://pkgs.fedoraproject.org/cgit/rpms/p7zip.git/plain/p7zip-15.09-CVE-2015-1038.patch -- Yaakov

Re: [ITA] p7zip

2014-08-04 Thread Corinna Vinschen
On Aug 4 08:35, Andrew Schulman wrote: > > Thanks all for the feedback and help. Sorry for showing up at a bad time. > > > > > Note: You should perhaps remove the "keepdir" that preserves the > > > /usr/lib/p7zip/Codecs directory. This drops a zero-s

Re: [ITA] p7zip

2014-08-04 Thread Andrew Schulman
> Thanks all for the feedback and help. Sorry for showing up at a bad time. > > > Note: You should perhaps remove the "keepdir" that preserves the > > /usr/lib/p7zip/Codecs directory. This drops a zero-size .keep-p7zip > > file in there that elicits a warning

Re: [ITA] p7zip

2014-08-04 Thread Tony Kelman
Thanks all for the feedback and help. Sorry for showing up at a bad time. Note: You should perhaps remove the "keepdir" that preserves the /usr/lib/p7zip/Codecs directory. This drops a zero-size .keep-p7zip file in there that elicits a warning from p7zip since it isn't a code

Re: [ITA] p7zip

2014-08-04 Thread Corinna Vinschen
On Aug 3 20:03, Achim Gratz wrote: > Marco Atzeri writes: > > 5 votes is for ITP of new package not included in a main linux distri. > > It does not apply to ITA. > > OK. > > > as CGF left who will take care of adding Tony to the > > authorized uploaders ? > > That would probably have to be don

Re: [ITA] p7zip

2014-08-03 Thread Achim Gratz
Marco Atzeri writes: > 5 votes is for ITP of new package not included in a main linux distri. > It does not apply to ITA. OK. > as CGF left who will take care of adding Tony to the > authorized uploaders ? That would probably have to be done by Corinna or Yaakov. But I'm not sure who has access

Re: [ITA] p7zip

2014-08-03 Thread Yaakov Selkowitz
On Sun, 2014-08-03 at 18:02 +0200, Marco Atzeri wrote: > as CGF left who will take care of adding Tony to the > authorized uploaders ? I will, but like all transitions, this looks like it will be a bit bumpy. As soon as I have things cleared up, I'll ack the SSH key thread. Yaakov

Re: [ITA] p7zip

2014-08-03 Thread Marco Atzeri
laxed since you're just taking over you'd need five votes). Hi Achim, 5 votes is for ITP of new package not included in a main linux distri. It does not apply to ITA. Note: You should perhaps remove the "keepdir" that preserves the /usr/lib/p7zip/Codecs directory. This drops a z

Re: [ITA] p7zip

2014-08-03 Thread Achim Gratz
ing over you'd need five votes). Note: You should perhaps remove the "keepdir" that preserves the /usr/lib/p7zip/Codecs directory. This drops a zero-size .keep-p7zip file in there that elicits a warning from p7zip since it isn't a codec. On the other hand, no warnings if the

Re: [ITA] p7zip

2014-08-02 Thread Andrew Schulman
ge has fallen out of date with current practice. Sorry about that. Package maintainers now upload their own packages. The procedure is described at https://sourceware.org/cygwin-apps/package-upload.html. In your request for upload privileges, be sure to mention that you're adopting p7zip, so

Re: [ITA] p7zip

2014-08-01 Thread Tony Kelman
spite reading all of https://cygwin.com/setup.html several times. Do I need another GTG for the slightly-modified version I posted? Or do I just ask "please upload" for that set of files now? https://ci.appveyor.com/api/buildjobs/76tibkftkdcnehl2/artifacts/p7zip-9.20.1-1.x86_64/dist/p7z

Re: [ITA] p7zip

2014-07-28 Thread Andrew Schulman
> On the topic of cygport, is there a variable that indicates whether --32 or > --64 was specified? Yes, there's ARCH, ARCH_i686, and ARCH_x86_64. See /usr/share/doc/cygport/manual.html.

Re: [ITA] p7zip

2014-07-26 Thread Tony Kelman
don't expect updated versions to be very frequent. New build with your suggested changes: https://ci.appveyor.com/api/buildjobs/76tibkftkdcnehl2/artifacts/p7zip-9.20.1-1.x86_64/dist/p7zip/p7zip-9.20.1-1.tar.xz https://ci.appveyor.com/api/buildjobs/76tibkftkdcnehl2/artifacts/p7zip-9.20.1-1.x86_64/

Re: [ITA] p7zip

2014-07-26 Thread Jon TURNEY
On 26/07/2014 09:00, Tony Kelman wrote: I noticed that all of Chuck Wilson's packages are now listed as orphaned. I'm particularly interested in getting one of them, p7zip, uploaded to the 64-bit distribution. I sent a few messages to the main list in March discussing what I needed to

Re: [ITA] p7zip

2014-07-26 Thread Andrew Schulman
> Hi, > > I noticed that all of Chuck Wilson's packages are now listed as orphaned. > I'm particularly interested in getting one of them, p7zip, uploaded to the > 64-bit distribution. I sent a few messages to the main list in March > discussing what I needed t

[ITA] p7zip

2014-07-26 Thread Tony Kelman
Hi, I noticed that all of Chuck Wilson's packages are now listed as orphaned. I'm particularly interested in getting one of them, p7zip, uploaded to the 64-bit distribution. I sent a few messages to the main list in March discussing what I needed to change in order to get the existi

Re: p7zip

2013-06-28 Thread Charles Wilson
On 6/28/2013 12:05 PM, Charles Wilson wrote: Who updated p7zip from 9.20.1-1 to 9.20.1-2 (32bit), and why? (Also, I don't see an announcement on cygwin-announce). Never mind; false alarm. I forgot I had cygwin-ports hooked into my cygwin 32 bit install. -- Chuck

p7zip

2013-06-28 Thread Charles Wilson
Who updated p7zip from 9.20.1-1 to 9.20.1-2 (32bit), and why? (Also, I don't see an announcement on cygwin-announce). -- Chuck

Re: p7zip-9.04-10 packaging

2010-10-14 Thread Charles Wilson
On 10/14/2010 6:16 AM, Marco Atzeri wrote: > so we have a DLL called 7z.so > that seems not used It is dynamically loaded by 7z.exe: 7z uses plugins (7z.so and Codecs/Rar29.so) to handle archives. 7za is a stand-alone executable. 7za handles less archive formats than 7z.exe. 7zr is a li

p7zip-9.04-10 packaging

2010-10-14 Thread Marco Atzeri
Hi Charles, I just noticed that: $ cd /usr/lib/p7zip/ /usr/lib/p7zip $ file * 7z.exe:PE32 executable for MS Windows (console) Intel 80386 32-bit 7z.so: PE32 executable for MS Windows (DLL) (console) Intel 80386 32-bit 7zCon.sfx.exe: PE32 executable for MS Windows (console) Intel

Re: [ITP] p7zip-4.57-1

2008-03-05 Thread Corinna Vinschen
On Mar 5 03:14, Charles Wilson wrote: > Corinna Vinschen wrote: > >> Uploaded and bash added to the requirements for good measure. >> Would you mind to add the URL to your setup.hint file as well next time? >> It makes uploading much easier. > > Sure, but most of the time I upload them myself. O

Re: [ITP] p7zip-4.57-1

2008-03-05 Thread Gergely Budai
> http://cygwin.cwilson.fastmail.fm/ITP/p7zip-4.57-1-src.tar.bz2 Compiles and builds from the source. I suggest adding -O2 instead of the default -O to the g++ options. Regards, Gergely Budai PS: It would have been a pity not to have this package in the cygwin world too ;) -- Der

Re: [ITP] p7zip-4.57-1

2008-03-05 Thread Charles Wilson
Corinna Vinschen wrote: Uploaded and bash added to the requirements for good measure. Would you mind to add the URL to your setup.hint file as well next time? It makes uploading much easier. Sure, but most of the time I upload them myself. -- Chuck

Re: [ITP] p7zip-4.57-1

2008-03-05 Thread Corinna Vinschen
On Mar 5 00:58, Charles Wilson wrote: > http://cygwin.cwilson.fastmail.fm/ITP/p7zip-4.57-1.tar.bz2 > http://cygwin.cwilson.fastmail.fm/ITP/p7zip-4.57-1-src.tar.bz2 > > = setup.hint = > category: Archive > requires: cygwin > sdesc: "A file archiver with ve

[GTG] Re: [ITP] p7zip-4.57-1

2008-03-04 Thread Dr. Volker Zell
>>>>> Charles Wilson writes: > This is actually a re-ITP. I posted p7zip-4.47-1 last year > http://www.cygwin.com/ml/cygwin-apps/2007-06/msg00046.html > but it kinda died without a yes/no after some issues with using > non-standard cygport mods, so

[ITP] p7zip-4.57-1

2008-03-04 Thread Charles Wilson
This is actually a re-ITP. I posted p7zip-4.47-1 last year http://www.cygwin.com/ml/cygwin-apps/2007-06/msg00046.html but it kinda died without a yes/no after some issues with using non-standard cygport mods, so nobody could give it a GTG. Contrary to my message here: http://www.cygwin.com

Re: [ITP] p7zip

2007-06-17 Thread Charles Wilson
Yaakov (Cygwin Ports) wrote: 3) Put this in src_install() ??? D'oh. You're right. It's when I need to go the *other* way that it must be done in a post-hook. Here, /usr/share/doc/${PN} --> /usr/share/doc/${PN}-${PV} works fine, because the target dir is the one cygport "likes". In rx

Re: [ITP] p7zip

2007-06-17 Thread Yaakov (Cygwin Ports)
th a link to the cygport patch > http://cygwin.com/ml/cygwin/2006-12/msg00626.html > > (2) patch the p7zip-supplied install.sh script to use > /usr/share/doc/${PN}-${PV} directly. 3) Put this in src_install() ??? Yaakov -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (Cygwin) Comm

Re: [ITP] p7zip

2007-06-17 Thread Christian Franke
Charles Wilson wrote: Dave Korn wrote: +1 when the above warts get resolved. Please try this one: http://cygutils.fruitbat.org/ITP/p7zip-4.47-2-src.tar.bz2 http://cygutils.fruitbat.org/ITP/p7zip-4.47-2.tar.bz2 This should correct everything mentioned above, except: I don't understan

Re: [ITP] p7zip

2007-06-17 Thread Charles Wilson
Dave Korn wrote: +1 when the above warts get resolved. Please try this one: http://cygutils.fruitbat.org/ITP/p7zip-4.47-2-src.tar.bz2 http://cygutils.fruitbat.org/ITP/p7zip-4.47-2.tar.bz2 This should correct everything mentioned above, except: I don't understand why you see

Re: [ITP] p7zip

2007-06-17 Thread Charles Wilson
Dave Korn wrote: On 17 June 2007 06:22, Charles Wilson wrote: 7-Zip is a file archiver with a high compression ratio in its native compression mode (LZMA). http://cygutils.fruitbat.org/ITP/p7zip-4.47-1.tar.bz2 Packaging's a bit bizarre. 1. Executables in a package-specific subd

Re: [ITP] p7zip

2007-06-17 Thread Charles Wilson
hat was only an accidental hint that p7zip is in debian). Of course, Kai already beat me to it: http://packages.debian.org/stable/utils/p7zip -- Chuck

Re: [ITP] p7zip

2007-06-17 Thread Kai Raphahn
Corinna Vinschen wrote: > On Jun 17 01:21, Charles Wilson wrote: >> 7-Zip is a file archiver with a high compression ratio [...] > ... and is available in which stable Linux distros? http://packages.debian.org/stable/utils/p7zip NSIS does use it too. IIRC its used for the instal

RE: [ITP] p7zip

2007-06-17 Thread Dave Korn
On 17 June 2007 06:22, Charles Wilson wrote: > 7-Zip is a file archiver with a high compression ratio in its native > compression mode (LZMA). > http://cygutils.fruitbat.org/ITP/p7zip-4.47-1.tar.bz2 Packaging's a bit bizarre. 1. Executables in a package-specific subd

Re: [ITP] p7zip

2007-06-17 Thread Corinna Vinschen
On Jun 17 01:21, Charles Wilson wrote: > 7-Zip is a file archiver with a high compression ratio [...] ... and is available in which stable Linux distros? Corinna -- Corinna Vinschen Please, send mails regarding Cygwin to Cygwin Project Co-Leader cygwin AT cygwin DOT c

[ITP] p7zip

2007-06-16 Thread Charles Wilson
7-Zip is a file archiver with a high compression ratio in its native compression mode (LZMA). However, it supports a number of other compression methods (zip, gzip, bzip2, etc). 7-Zip was originally developed as a Windows GUI application: p7zip is a cross-platform (mostly unix) port