Page MenuHomeFreeBSD

OpenSSH: cherry-pick "need initgroups() before setresgid()"
ClosedPublic

Authored by emaste on Tue, Oct 12, 12:56 AM.

Details

Summary

From openssh-portable commits f3cbe43e28fe and bf944e3794ef, backported to OpenSSH 7.9p1 on stable/13.

Security: CVE-2021-41617

(cherry picked from commit 172fa4aa7577915bf5ace5783251821d3774dc05)

Diff Detail

Repository
R10 FreeBSD src repository
Lint
Automatic diff as part of commit; lint not applicable.
Unit
Automatic diff as part of commit; unit tests not applicable.