Custom Query (8171 matches)

Crashing when transferring files, reprodusable almost every transfer on 3 different PC all with fedora 19.

FileZilla Client

Version: 3.7.1

Build information:

Compiled for: i686-redhat-linux-gnu Compiled on: i686-redhat-linux-gnu Build date: 2013-06-21 Compiled with: gcc (GCC) 4.8.1 20130603 (Red Hat 4.8.1-1) Compiler flags: -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -grecord-gcc-switches -m32 -march=i686 -mtune=atom -fasynchronous-unwind-tables -Wall -g -fexceptions -std=gnu++11

Linked against:

wxWidgets: 2.8.12 GnuTLS: 3.1.11 SQLite: 3.7.17

Operating system:

Name: Linux 3.9.9-302.fc19.i686.PAE i686 Version: 3.9

Reference: ​http://www.openwall.com/lists/oss-security/2013/08/06/13

"On 08/06/2013 01:56 PM, Vincent Danen wrote:

There seem to be some CVEs needed for putty 0.63 due to some other fixes that were fixed alongside CVE-2013-4852:

• a heap-corrupting buffer underrun bug in the modmul function

which performs modular multiplication: ​http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-modmul.html

​http://svn.tartarus.org/sgt?view=revision&sortby=date&revision=9977

Please use CVE-2013-4206 for this issue.

• A buffer overflow vulnerability in the calculation of modular

inverses when verifying a DSA signature: ​http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-bignum-division-by-zero.html

​http://svn.tartarus.org/sgt?view=revision&sortby=date&revision=9996

Please

use CVE-2013-4207 for this issue.

• Private keys left in memory after being used by PuTTY tools:

​http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/private-key-not-wiped.html

​http://svn.tartarus.org/sgt?view=revision&sortby=date&revision=9988

Please

use CVE-2013-4208 for this issue."

Building FileZilla on Mac OS X fails with fzputtygen: No such file or directory because of the wrong building order:

cp -f fzsftp ../../FileZilla.app/Contents/MacOS/fzsftp
cp -f fzputtygen ../../FileZilla.app/Contents/MacOS/fzputtygen
cp: fzputtygen: No such file or directory
make[3]: *** [../../FileZilla.app/Contents/MacOS/fzsftp] Error 1
make[3]: *** Waiting for unfinished jobs....
libtool: link: /usr/bin/clang -pipe -Os -arch x86_64 -Wall -g -fexceptions -Wl,-headerpad_max_install_names -arch x86_64 -o fzputtygen fzputtygen-cmdgen.o fzputtygen-import.o fzputtygen-notiming.o fzputtygen-tree234.o  -L/opt/local/lib unix/libfzputtycommon_ux.a libfzputtycommon.a

The following trivial patch for version 3.7.3 should probably fix it:

--- a/src/putty/Makefile.am
+++ b/src/putty/Makefile.am
@@ -81,7 +81,7 @@ if MACAPPBUNDLE
 noinst_DATA = $(top_builddir)/FileZilla.app/Contents/MacOS/fzsftp$(EXEEXT)
 endif
  
-$(top_builddir)/FileZilla.app/Contents/MacOS/fzsftp$(EXEEXT): fzsftp
+$(top_builddir)/FileZilla.app/Contents/MacOS/fzsftp$(EXEEXT): fzsftp fzputtygen
 	mkdir -p $(top_builddir)/FileZilla.app/Contents/MacOS
 	cp -f fzsftp $(top_builddir)/FileZilla.app/Contents/MacOS/fzsftp
 	cp -f fzputtygen $(top_builddir)/FileZilla.app/Contents/MacOS/fzputtygen