OpenSSH: cherry-pick "need initgroups() before setresgid()"
ClosedPublic
Actions

Authored by emaste on Oct 12 2021, 12:56 AM.

Tags

None

Referenced Files

	Unknown Object (File)
	Mon, Apr 21, 3:12 PM

	Unknown Object (File)
	Sun, Apr 20, 7:44 AM

	Unknown Object (File)
	Mar 25 2025, 10:01 AM

	Unknown Object (File)
	Mar 23 2025, 6:02 AM

	Unknown Object (File)
	Feb 21 2025, 11:57 AM

	Unknown Object (File)
	Jan 26 2025, 7:53 PM

	Unknown Object (File)
	Jan 26 2025, 7:25 PM

	Unknown Object (File)
	Jan 26 2025, 12:23 PM

View All 58 Files

Subscribers

imp

Details

Reviewers

des
delphij
bdrewery

Commits

rG5e6d12734846: OpenSSH: cherry-pick "need initgroups() before setresgid()"
rGbe74669a2f62: OpenSSH: cherry-pick "need initgroups() before setresgid()"

Summary

From openssh-portable commits f3cbe43e28fe and bf944e3794ef, backported to OpenSSH 7.9p1 on stable/13.

Security: CVE-2021-41617

(cherry picked from commit 172fa4aa7577915bf5ace5783251821d3774dc05)

Diff Detail

Lint

Lint Skipped

Unit

Tests Skipped

Event Timeline

emaste requested review of this revision.Oct 12 2021, 12:56 AM

emaste created this revision.

delphij accepted this revision.Oct 12 2021, 3:55 AM

This revision is now accepted and ready to land.Oct 12 2021, 3:55 AM

Closed by commit rGbe74669a2f62: OpenSSH: cherry-pick "need initgroups() before setresgid()" (authored by emaste). · Explain WhyOct 12 2021, 3:39 PM

This revision was automatically updated to reflect the committed changes.

emaste added a commit: rGbe74669a2f62: OpenSSH: cherry-pick "need initgroups() before setresgid()".

Herald added a subscriber: imp. · View Herald TranscriptOct 12 2021, 3:39 PM

emaste added a commit: rG5e6d12734846: OpenSSH: cherry-pick "need initgroups() before setresgid()".Oct 12 2021, 4:32 PM

For reference, SuSE bug for this: https://bugzilla.suse.com/show_bug.cgi?id=1190975

Revision Contents
Changeset List

Path

Size

crypto/

openssh/

auth.c

8 lines

Diff 96714

View Options

OpenSSH: cherry-pick "need initgroups() before setresgid()"ClosedPublicActions