Differential D32460

OpenSSH: cherry-pick "need initgroups() before setresgid()"
ClosedPublic
Actions

Authored by emaste on Oct 12 2021, 12:56 AM.

Tags

None

Referenced Files

	Unknown Object (File)
	Fri, Oct 18, 2:22 AM

	Unknown Object (File)
	Oct 6 2024, 6:57 AM

	Unknown Object (File)
	Oct 3 2024, 10:04 AM

	Unknown Object (File)
	Oct 2 2024, 5:18 PM

	Unknown Object (File)
	Oct 2 2024, 3:09 PM

	Unknown Object (File)
	Oct 2 2024, 8:08 AM

	Unknown Object (File)
	Oct 1 2024, 2:12 PM

	Unknown Object (File)
	Oct 1 2024, 12:50 PM

View All 43 Files

Subscribers

Details

Reviewers

des
delphij
bdrewery

Commits

rG5e6d12734846: OpenSSH: cherry-pick "need initgroups() before setresgid()"
rGbe74669a2f62: OpenSSH: cherry-pick "need initgroups() before setresgid()"

Summary

From openssh-portable commits f3cbe43e28fe and bf944e3794ef, backported to OpenSSH 7.9p1 on stable/13.

Security: CVE-2021-41617

(cherry picked from commit 172fa4aa7577915bf5ace5783251821d3774dc05)

Diff Detail

Lint

Lint Skipped

Unit

Tests Skipped

Event Timeline

emaste requested review of this revision.Oct 12 2021, 12:56 AM

emaste created this revision.

delphij accepted this revision.Oct 12 2021, 3:55 AM

This revision is now accepted and ready to land.Oct 12 2021, 3:55 AM

Closed by commit rGbe74669a2f62: OpenSSH: cherry-pick "need initgroups() before setresgid()" (authored by emaste). · Explain WhyOct 12 2021, 3:39 PM

This revision was automatically updated to reflect the committed changes.

emaste added a commit: rGbe74669a2f62: OpenSSH: cherry-pick "need initgroups() before setresgid()".

Herald added a subscriber: imp. · View Herald TranscriptOct 12 2021, 3:39 PM

emaste added a commit: rG5e6d12734846: OpenSSH: cherry-pick "need initgroups() before setresgid()".Oct 12 2021, 4:32 PM

For reference, SuSE bug for this: https://bugzilla.suse.com/show_bug.cgi?id=1190975

Revision Contents
Changeset List

Path

Size

crypto/

openssh/

8 lines

Diff 96714

crypto/openssh/auth.c

Loading...