pool/openssh
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 861779 from network

Browse Source 
- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory. (forwarded request 861491 from hpjansson)

OBS-URL: https://build.opensuse.org/request/show/861779
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/openssh?expand=0&rev=146
This commit is contained in:
Dominique Leuenberger 2021-01-15 18:43:28 +00:00 committed by Git OBS Bridge
commit 781abafa25
2 changed files with 12 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
openssh-8.1p1-audit.patch
View File

@ -1,5 +1,5 @@
diff --git a/Makefile.in b/Makefile.in
index 9d3f569..5a0e0b6 100644
index 88aba09..b815eac 100644
--- a/Makefile.in
+++ b/Makefile.in
@@ -115,7 +115,7 @@ LIBSSH_OBJS=${LIBOPENSSH_OBJS} \
@ -1673,7 +1673,7 @@ index 485590c..73c095e 100644
struct Session;
diff --git a/packet.c b/packet.c
index e7abb34..3e9c95e 100644
index e7abb34..997c338 100644
--- a/packet.c
+++ b/packet.c
@@ -81,6 +81,7 @@
@ -1753,7 +1753,7 @@ index e7abb34..3e9c95e 100644
state->newkeys[mode] = NULL;
}
/* note that both bytes and the seqnr are not reset */
@@ -2205,6 +2221,71 @@ ssh_packet_get_output(struct ssh *ssh)
@@ -2205,6 +2221,73 @@ ssh_packet_get_output(struct ssh *ssh)
return (void *)ssh->state->output;
}
@ -1783,7 +1783,9 @@ index e7abb34..3e9c95e 100644
+ return;
+
+ cipher_free(state->receive_context);
+ state->receive_context = NULL;
+ cipher_free(state->send_context);
+ state->send_context = NULL;
+
+ sshbuf_free(state->input);
+ state->input = NULL;

7
openssh.changes
View File

@ -1,3 +1,10 @@
-------------------------------------------------------------------
Fri Jan 8 01:37:02 UTC 2021 - Hans Petter Jansson <hpj@suse.com>
- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
occasional crashes on connection termination caused by accessing
freed memory.
-------------------------------------------------------------------
Fri Nov 27 11:36:56 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>