Re: [SECURITY] p7zip: CVE-2015-1038

[Corinna Vinschen <corinna-cygwin at cygwin dot com>]

On Jan 30 00:13, Tony Kelman wrote:
> > Ack, will do today. Need to copy my ssh keys over to a new laptop, hopefully that
> > will go smoothly and I've got all the build-deps installed.
> 
> It didn't. Am I doing this wrong? (and should I move this to the main list?)
> 
> $ eval `ssh-agent`
> Agent pid 12848
> 
> Tony@LAPTOP-O230JCFF ~/github/cygwin-p7zip
> $ ssh-add
> Enter passphrase for /home/Tony/.ssh/id_rsa:
> Identity added: /home/Tony/.ssh/id_rsa (/home/Tony/.ssh/id_rsa)
> Identity added: /home/Tony/.ssh/id_dsa (/home/Tony/.ssh/id_dsa)
> 
> Tony@LAPTOP-O230JCFF ~/github/cygwin-p7zip
> $ cygport p7zip-15.09-2.cygport upload
> >>> Uploading p7zip-15.09-2.x86_64
> >>> Running lftp sftp://cygwin@cygwin.com
> Password:
> cd: Fatal error: Host key verification failed
                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

The host key you stored for sourceware isn't the right one for some
reason.  Remove it with ssh-keygen -R and check for correctness when
you connect again, see the fingerprints at
https://sourceware.org/cygwin-apps/package-upload.html


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

Attachment: signature.asc
Description: PGP signature