packages/openssh
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

!88 fix CVE-2021-28041

Browse Source 
Merge pull request !88 from Rock/openEuler-20.03-LTS-SP3
This commit is contained in:
openeuler-ci-bot 2021-12-15 09:28:01 +00:00 committed by Gitee
commit 431c0c17c5
2 changed files with 25 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
backport-CVE-2021-28041.patch Normal file
View File

@ -0,0 +1,16 @@
Reference:https://src.fedoraproject.org/rpms/openssh/blob/f33/f/openssh-8.4p1-cve-2021-28041.patch
diff --git a/ssh-agent.c b/ssh-agent.c
index 6e536e5..3bac42d 100644
--- a/ssh-agent.c
+++ b/ssh-agent.c
@@ -496,6 +496,7 @@ process_add_identity(SocketEntry *e)
goto err;
}
free(ext_name);
+ ext_name = NULL;
break;
default:
error("%s: Unknown constraint %d", __func__, ctype);
--
1.8.3.1

10
openssh.spec
View File

@ -6,7 +6,7 @@
%{?no_gtk2:%global gtk2 0} %{?no_gtk2:%global gtk2 0}
%global sshd_uid 74 %global sshd_uid 74
%global openssh_release 14 %global openssh_release 15
Name: openssh Name: openssh
Version: 8.2p1 Version: 8.2p1
@ -94,6 +94,7 @@ Patch61: add-strict-scp-check-for-CVE-2020-15778.patch
Patch62: backport-move-closefrom-to-before-first-malloc.patch Patch62: backport-move-closefrom-to-before-first-malloc.patch
Patch63: backport-CVE-2021-41617-1.patch Patch63: backport-CVE-2021-41617-1.patch
Patch64: backport-CVE-2021-41617-2.patch Patch64: backport-CVE-2021-41617-2.patch
Patch65: backport-CVE-2021-28041.patch
Requires: /sbin/nologin Requires: /sbin/nologin
Requires: libselinux >= 2.3-5 audit-libs >= 1.0.8 Requires: libselinux >= 2.3-5 audit-libs >= 1.0.8
@ -260,6 +261,7 @@ popd
%patch62 -p1 %patch62 -p1
%patch63 -p1 %patch63 -p1
%patch64 -p1 %patch64 -p1
%patch65 -p1
autoreconf autoreconf
pushd pam_ssh_agent_auth-0.10.3 pushd pam_ssh_agent_auth-0.10.3
@ -471,6 +473,12 @@ getent passwd sshd >/dev/null || \
%attr(0644,root,root) %{_mandir}/man8/sftp-server.8* %attr(0644,root,root) %{_mandir}/man8/sftp-server.8*
%changelog %changelog
* Wed Dec 15 2021 renmingshuai<renmingshuai@hauwei.com> - 8.2P1-15
- Type:cves
- CVE:CVE-2021-28041
- SUG:NA
- DESC:fix CVE-2021-28041
* Sat Oct 09 2021 renmingshuai<renmingshuai@hauwei.com> - 8.2P1-14 * Sat Oct 09 2021 renmingshuai<renmingshuai@hauwei.com> - 8.2P1-14
- Type:bugfix - Type:bugfix
- CVE:CVE-2021-41617 - CVE:CVE-2021-41617