svn commit: r47130 - in head/share/security: advisories patches/SA-15:16
Xin LI <[email protected]>
| Newsgroups | gmane.os.freebsd.devel.cvs.doc |
|---|---|
| Message-ID | <[email protected]> |
Author: delphij
Date: Thu Jul 30 10:27:50 2015
New Revision: 47130
URL: https://svnweb.freebsd.org/changeset/doc/47130
Log:
Revise SA-15:16 for regression in FreeBSD 8.4.
Added:
head/share/security/patches/SA-15:16/openssh-8-errata.patch (contents, props changed)
head/share/security/patches/SA-15:16/openssh-8-errata.patch.asc (contents, props changed)
Modified:
head/share/security/advisories/FreeBSD-SA-15:16.openssh.asc
Modified: head/share/security/advisories/FreeBSD-SA-15:16.openssh.asc
==============================================================================
--- head/share/security/advisories/FreeBSD-SA-15:16.openssh.asc Wed Jul 29 20:18:37 2015 (r47129)
+++ head/share/security/advisories/FreeBSD-SA-15:16.openssh.asc Thu Jul 30 10:27:50 2015 (r47130)
@@ -9,7 +9,7 @@ Topic: OpenSSH multiple vulnera
Category: contrib
Module: openssh
-Announced: 2015-07-28
+Announced: 2015-07-28, revised on 2015-07-30
Affects: All supported versions of FreeBSD.
Corrected: 2015-07-28 19:58:44 UTC (stable/10, 10.2-PRERELEASE)
2015-07-28 19:58:44 UTC (stable/10, 10.2-BETA2-p2)
@@ -17,14 +17,20 @@ Corrected: 2015-07-28 19:58:44 UTC
2015-07-28 19:59:11 UTC (releng/10.1, 10.1-RELEASE-p16)
2015-07-28 19:58:54 UTC (stable/9, 9.3-STABLE)
2015-07-28 19:59:22 UTC (releng/9.3, 9.3-RELEASE-p21)
- 2015-07-28 19:58:54 UTC (stable/8, 8.4-STABLE)
- 2015-07-28 19:59:22 UTC (releng/8.4, 8.4-RELEASE-p35)
+ 2015-07-30 10:09:07 UTC (stable/8, 8.4-STABLE)
+ 2015-07-30 10:09:31 UTC (releng/8.4, 8.4-RELEASE-p36)
CVE Name: CVE-2014-2653, CVE-2015-5600
For general information regarding FreeBSD Security Advisories,
including descriptions of the fields above, security branches, and the
following sections, please visit <URL:https://security.FreeBSD.org/>.
+0. Revision history
+
+v1.0 2015-02-25 Initial release.
+v1.1 2015-07-30 Revised patch for FreeBSD 8.x to address regression when
+ keyboard interactive authentication is used.
+
I. Background
OpenSSH is an implementation of the SSH protocol suite, providing an
@@ -125,6 +131,10 @@ detached PGP signature using your PGP ut
# fetch https://security.FreeBSD.org/patches/SA-15:16/openssh-8.patch.asc
# gpg --verify openssh-8.patch.asc
+# fetch https://security.FreeBSD.org/patches/SA-15:16/openssh-8-errata.patc
+# fetch https://security.FreeBSD.org/patches/SA-15:16/openssh-8-errata.patch.asc
+# gpg --verify openssh-8-errata.patch.asc
+
b) Apply the patch. Execute the following commands as root:
# cd /usr/src
@@ -142,8 +152,8 @@ affected branch.
Branch/path Revision
- -------------------------------------------------------------------------
-stable/8/ r285977
-releng/8.4/ r285980
+stable/8/ r286067
+releng/8.4/ r286068
stable/9/ r285977
releng/9.3/ r285980
stable/10/ r285976
@@ -172,17 +182,17 @@ The latest revision of this advisory is
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.1.6 (FreeBSD)
-iQIcBAEBCgAGBQJVt+FdAAoJEO1n7NZdz2rnPxEQAIFMhBzUuAEEeG3GoO6o6DQn
-7ZVPdd+EdijDk0VAZbaa3NyeVGTNSEQhjpL/lSkIQUQT+yEAUUsUCVWu0T8OpCN0
-UT6JlYhV+AwQVyWujlTjspQ3Ba3Kn3o76MCzvdIQWPTzD1yCZqRmpZ1eSjonmySZ
-ts+kVDCV2ZJyWACOdG2GXHSmTraIErn0J1YaLg++c8nHUvb+TNo2/8viBGJINhdP
-bvA6fzYPpAzgaq5EEKevySLUnUfUE2Nx5LGD2CUx/hMu7K8y2h4SR2fKmpyBauNS
-4VHSssX6KjxZCYctCEsUgCokWYzt9fepyBsCiS9Vx4mTwat8Vuiz2zB1lCOwM97v
-iDbkcmR/ixElrXSBb5+wrhOpBLnYtHFTNPx8dRz39wdb1MxJQqyOOb8KtDSlFMmQ
-l5Lk1vTEcZQjWvmCV9XjVlPqcHnX4wNnV+IgUnQTnhQlbe0YgszdLAi5XZDGBmtA
-DHuLfBy1091KYBoP641GRuldsq6/r6DUzyZuQJ+p30BDUEfkUAptIEnQWA2l3Y8W
-/10eels29WJhV9N7WWo4pbADA54+DLvi0T/46R9WRbM9bA/dsqK9G5wmREaKCqmX
-ccQUFrruxJTn7TV4QbN69ABEkOFCyQjqecP2GqA2N/5AAUsV47WC/VtKgOPp4FZ6
-E0SkAoNzIighyNk54U9p
-=6PBw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+=GsXJ
-----END PGP SIGNATURE-----
Added: head/share/security/patches/SA-15:16/openssh-8-errata.patch
==============================================================================
--- /dev/null 00:00:00 1970 (empty, because file is newly added)
+++ head/share/security/patches/SA-15:16/openssh-8-errata.patch Thu Jul 30 10:27:50 2015 (r47130)
@@ -0,0 +1,12 @@
+Index: crypto/openssh/auth2-chall.c
+===================================================================
+--- crypto/openssh/auth2-chall.c (revision 286066)
++++ crypto/openssh/auth2-chall.c (working copy)
+@@ -131,6 +131,7 @@ kbdint_alloc(const char *devs)
+ kbdintctxt->ctxt = NULL;
+ kbdintctxt->device = NULL;
+ kbdintctxt->nreq = 0;
++ kbdintctxt->devices_done = 0;
+
+ return kbdintctxt;
+ }
Added: head/share/security/patches/SA-15:16/openssh-8-errata.patch.asc
==============================================================================
--- /dev/null 00:00:00 1970 (empty, because file is newly added)
+++ head/share/security/patches/SA-15:16/openssh-8-errata.patch.asc Thu Jul 30 10:27:50 2015 (r47130)
@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2.1.6 (FreeBSD)
+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+=8Eu0
+-----END PGP SIGNATURE-----
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/svn-doc-all
To unsubscribe, send any mail to "[email protected]"