Differential D32460

OpenSSH: cherry-pick "need initgroups() before setresgid()"
ClosedPublic
Actions

Authored by emaste on Oct 12 2021, 12:56 AM.

Tags

None

Referenced Files

	Unknown Object (File)
	Wed, Sep 11, 5:32 AM

	Unknown Object (File)
	Sat, Sep 7, 3:32 PM

	Unknown Object (File)
	Sat, Sep 7, 2:57 PM

	Unknown Object (File)
	Fri, Sep 6, 11:47 AM

	Unknown Object (File)
	Thu, Sep 5, 5:52 PM

	Unknown Object (File)
	Thu, Sep 5, 3:51 PM

	Unknown Object (File)
	Thu, Sep 5, 3:15 AM

	Unknown Object (File)
	Aug 23 2024, 11:48 PM

View All 34 Files

Subscribers

Details

Reviewers

des
delphij
bdrewery

Commits

rG5e6d12734846: OpenSSH: cherry-pick "need initgroups() before setresgid()"
rGbe74669a2f62: OpenSSH: cherry-pick "need initgroups() before setresgid()"

Summary

From openssh-portable commits f3cbe43e28fe and bf944e3794ef, backported to OpenSSH 7.9p1 on stable/13.

Security: CVE-2021-41617

(cherry picked from commit 172fa4aa7577915bf5ace5783251821d3774dc05)

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

emaste requested review of this revision.Oct 12 2021, 12:56 AM

emaste created this revision.

delphij accepted this revision.Oct 12 2021, 3:55 AM

This revision is now accepted and ready to land.Oct 12 2021, 3:55 AM

Closed by commit rGbe74669a2f62: OpenSSH: cherry-pick "need initgroups() before setresgid()" (authored by emaste). · Explain WhyOct 12 2021, 3:39 PM

This revision was automatically updated to reflect the committed changes.

emaste added a commit: rGbe74669a2f62: OpenSSH: cherry-pick "need initgroups() before setresgid()".

Herald added a subscriber: imp. · View Herald TranscriptOct 12 2021, 3:39 PM

emaste added a commit: rG5e6d12734846: OpenSSH: cherry-pick "need initgroups() before setresgid()".Oct 12 2021, 4:32 PM

For reference, SuSE bug for this: https://bugzilla.suse.com/show_bug.cgi?id=1190975

Revision Contents
Changeset List

Path

Size

crypto/

openssh/

8 lines

Diff 96741

crypto/openssh/auth.c

Loading...