OpenSSH: cherry-pick "need initgroups() before setresgid()"
ClosedPublic
Actions

Authored by emaste on Oct 12 2021, 12:56 AM.

Tags

None

Referenced Files

	Unknown Object (File)
	Tue, May 28, 8:28 PM

	Unknown Object (File)
	Mon, May 27, 1:15 AM

	Unknown Object (File)
	May 17 2024, 5:56 AM

	Unknown Object (File)
	May 17 2024, 4:33 AM

	Unknown Object (File)
	Apr 25 2024, 6:05 AM

	Unknown Object (File)
	Mar 20 2024, 6:01 AM

	Unknown Object (File)
	Dec 20 2023, 8:19 AM

	Unknown Object (File)
	Dec 12 2023, 10:00 AM

View All 17 Files

Subscribers

imp

Details

Reviewers

des
delphij
bdrewery

Commits

rG5e6d12734846: OpenSSH: cherry-pick "need initgroups() before setresgid()"
rGbe74669a2f62: OpenSSH: cherry-pick "need initgroups() before setresgid()"

Summary

From openssh-portable commits f3cbe43e28fe and bf944e3794ef, backported to OpenSSH 7.9p1 on stable/13.

Security: CVE-2021-41617

(cherry picked from commit 172fa4aa7577915bf5ace5783251821d3774dc05)

Diff Detail

Lint

Lint Skipped

Unit

Tests Skipped

Event Timeline

emaste requested review of this revision.Oct 12 2021, 12:56 AM

emaste created this revision.

delphij accepted this revision.Oct 12 2021, 3:55 AM

This revision is now accepted and ready to land.Oct 12 2021, 3:55 AM

Closed by commit rGbe74669a2f62: OpenSSH: cherry-pick "need initgroups() before setresgid()" (authored by emaste). · Explain WhyOct 12 2021, 3:39 PM

This revision was automatically updated to reflect the committed changes.

emaste added a commit: rGbe74669a2f62: OpenSSH: cherry-pick "need initgroups() before setresgid()".

Herald added a subscriber: imp. · View Herald TranscriptOct 12 2021, 3:39 PM

emaste added a commit: rG5e6d12734846: OpenSSH: cherry-pick "need initgroups() before setresgid()".Oct 12 2021, 4:32 PM

For reference, SuSE bug for this: https://bugzilla.suse.com/show_bug.cgi?id=1190975

Revision Contents
Changeset List

Path

Size

crypto/

openssh/

auth.c

8 lines

Diff 96714

View Options

OpenSSH: cherry-pick "need initgroups() before setresgid()"ClosedPublicActions