OpenSSH: cherry-pick "need initgroups() before setresgid()"
ClosedPublic
Actions

Authored by emaste on Oct 12 2021, 12:56 AM.

Tags

None

Referenced Files

	F108495971: D32460.diff
	Sat, Jan 25, 2:24 PM

	F108429247: D32460.id.diff
	Fri, Jan 24, 5:17 PM

	Unknown Object (File)
	Sat, Jan 18, 10:04 PM

	Unknown Object (File)
	Fri, Jan 10, 5:36 PM

	Unknown Object (File)
	Dec 15 2024, 4:27 PM

	Unknown Object (File)
	Dec 13 2024, 6:28 AM

	Unknown Object (File)
	Oct 18 2024, 2:22 AM

	Unknown Object (File)
	Oct 6 2024, 6:57 AM

View All 49 Files

Subscribers

imp

Details

Reviewers

des
delphij
bdrewery

Commits

rG5e6d12734846: OpenSSH: cherry-pick "need initgroups() before setresgid()"
rGbe74669a2f62: OpenSSH: cherry-pick "need initgroups() before setresgid()"

Summary

From openssh-portable commits f3cbe43e28fe and bf944e3794ef, backported to OpenSSH 7.9p1 on stable/13.

Security: CVE-2021-41617

(cherry picked from commit 172fa4aa7577915bf5ace5783251821d3774dc05)

Diff Detail

Lint

Lint Skipped

Unit

Tests Skipped

Event Timeline

emaste requested review of this revision.Oct 12 2021, 12:56 AM

emaste created this revision.

delphij accepted this revision.Oct 12 2021, 3:55 AM

This revision is now accepted and ready to land.Oct 12 2021, 3:55 AM

Closed by commit rGbe74669a2f62: OpenSSH: cherry-pick "need initgroups() before setresgid()" (authored by emaste). · Explain WhyOct 12 2021, 3:39 PM

This revision was automatically updated to reflect the committed changes.

emaste added a commit: rGbe74669a2f62: OpenSSH: cherry-pick "need initgroups() before setresgid()".

Herald added a subscriber: imp. · View Herald TranscriptOct 12 2021, 3:39 PM

emaste added a commit: rG5e6d12734846: OpenSSH: cherry-pick "need initgroups() before setresgid()".Oct 12 2021, 4:32 PM

For reference, SuSE bug for this: https://bugzilla.suse.com/show_bug.cgi?id=1190975

Revision Contents
Changeset List

Path

Size

crypto/

openssh/

auth.c

8 lines

Diff 96714

View Options

OpenSSH: cherry-pick "need initgroups() before setresgid()"ClosedPublicActions