[SECURITY] p7zip: CVE-2015-1038

Corinna Vinschen corinna-cygwin@cygwin.com
Mon Feb 8 13:54:00 GMT 2016

On Jan 30 00:13, Tony Kelman wrote:
> > Ack, will do today. Need to copy my ssh keys over to a new laptop, hopefully that
> > will go smoothly and I've got all the build-deps installed.
> It didn't. Am I doing this wrong? (and should I move this to the main list?)
> $ eval `ssh-agent`
> Agent pid 12848
> Tony@LAPTOP-O230JCFF ~/github/cygwin-p7zip
> $ ssh-add
> Enter passphrase for /home/Tony/.ssh/id_rsa:
> Identity added: /home/Tony/.ssh/id_rsa (/home/Tony/.ssh/id_rsa)
> Identity added: /home/Tony/.ssh/id_dsa (/home/Tony/.ssh/id_dsa)
> Tony@LAPTOP-O230JCFF ~/github/cygwin-p7zip
> $ cygport p7zip-15.09-2.cygport upload
> >>> Uploading p7zip-15.09-2.x86_64
> >>> Running lftp sftp://cygwin@cygwin.com
> Password:
> cd: Fatal error: Host key verification failed

The host key you stored for sourceware isn't the right one for some
reason.  Remove it with ssh-keygen -R and check for correctness when
you connect again, see the fingerprints at


Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://cygwin.com/pipermail/cygwin-apps/attachments/20160208/16e317c3/attachment.sig>

More information about the Cygwin-apps mailing list