From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 102999 invoked by alias); 9 Feb 2016 01:42:35 -0000 Mailing-List: contact cygwin-apps-help@cygwin.com; run by ezmlm Precedence: bulk Sender: cygwin-apps-owner@cygwin.com List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Mail-Followup-To: cygwin-apps@cygwin.com Received: (qmail 102980 invoked by uid 89); 9 Feb 2016 01:42:35 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=2.8 required=5.0 tests=AWL,BAYES_50,KAM_LAZY_DOMAIN_SECURITY,RCVD_IN_DNSWL_LOW autolearn=no version=3.3.2 spammy=Hx-spam-relays-external:sk:BAY004-, H*RU:sk:BAY004-, H*r:sk:BAY004-, tony X-HELO: BAY004-OMC4S22.hotmail.com Received: from bay004-omc4s22.hotmail.com (HELO BAY004-OMC4S22.hotmail.com) (65.54.190.224) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with (AES256-SHA256 encrypted) ESMTPS; Tue, 09 Feb 2016 01:42:34 +0000 Received: from BAY169-W61 ([65.54.190.201]) by BAY004-OMC4S22.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23008); Mon, 8 Feb 2016 17:42:32 -0800 X-TMN: [JO9exTAGBEA9+6wzUZ6vyTnkHJAG30gnIw+MTS6HxGo=] Message-ID: From: Tony Kelman To: "cygwin-apps@cygwin.com" Subject: RE: [SECURITY] p7zip: CVE-2015-1038 Date: Tue, 09 Feb 2016 01:42:00 -0000 In-Reply-To: <20160208135409.GI27646@calimero.vinschen.de> References: <56AB9A3F.3040808@cygwin.com> ,<20160208135409.GI27646@calimero.vinschen.de> Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-IsSubscribed: yes X-SW-Source: 2016-02/txt/msg00013.txt.bz2 >> Tony@LAPTOP-O230JCFF ~/github/cygwin-p7zip >> $ cygport p7zip-15.09-2.cygport upload >>>>> Uploading p7zip-15.09-2.x86_64 >>>>> Running lftp sftp://cygwin@cygwin.com >> Password: >> cd: Fatal error: Host key verification failed > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > > The host key you stored for sourceware isn't the right one for some > reason. Remove it with ssh-keygen -R and check for correctness when > you connect again, see the fingerprints at > https://sourceware.org/cygwin-apps/package-upload.html Thanks for the help Corinna. I don't have anything for sourceware or cygwin.com in ~/.ssh/known_hosts, should I? -Tony =20=09=09=20=09=20=20=20=09=09=20=20