Antonio Larrosa
45f6d17800
package existed for a brief period of time during SLE 15 SP6/
Leap 15.6 development but even if it was removed from the
repositories before GM, some users might have it in their
systems from having tried a beta/RC release (boo#1227350).
quoting was present in the user-supplied ssh_config(5) directive
(bsc#1218215, CVE-2023-51385).
OBS-URL: https://build.opensuse.org/package/show/network/openssh?expand=0&rev=270
35 lines
927 B
Diff
35 lines
927 B
Diff
Index: openssh-8.8p1/sandbox-seccomp-filter.c
|
|
===================================================================
|
|
--- openssh-8.8p1.orig/sandbox-seccomp-filter.c
|
|
+++ openssh-8.8p1/sandbox-seccomp-filter.c
|
|
@@ -201,6 +201,9 @@ static const struct sock_filter preauth_
|
|
#ifdef __NR_close
|
|
SC_ALLOW(__NR_close),
|
|
#endif
|
|
+#ifdef __NR_close_range
|
|
+ SC_ALLOW(__NR_close_range),
|
|
+#endif
|
|
#ifdef __NR_exit
|
|
SC_ALLOW(__NR_exit),
|
|
#endif
|
|
@@ -213,6 +216,9 @@ static const struct sock_filter preauth_
|
|
#ifdef __NR_futex_time64
|
|
SC_FUTEX(__NR_futex_time64),
|
|
#endif
|
|
+#ifdef __NR_futex_time64
|
|
+ SC_ALLOW(__NR_futex_time64),
|
|
+#endif
|
|
#ifdef __NR_geteuid
|
|
SC_ALLOW(__NR_geteuid),
|
|
#endif
|
|
@@ -293,6 +299,9 @@ static const struct sock_filter preauth_
|
|
#endif
|
|
#ifdef __NR_pselect6_time64
|
|
SC_ALLOW(__NR_pselect6_time64),
|
|
+#endif
|
|
+#ifdef __NR_pselect6_time64
|
|
+ SC_ALLOW(__NR_pselect6_time64),
|
|
#endif
|
|
#ifdef __NR_read
|
|
SC_ALLOW(__NR_read),
|