rpms/openssh
7
0
Fork 2
Code Issues Pull Requests Releases Activity

Add missing NULL check for server key generation in ML-KEM hybrids

Browse Source 
Resolves: RHEL-168106
This commit is contained in:
Dmitry Belyavskiy 2026-04-14 16:24:03 +02:00
parent b35a30acc7
commit 125c748cc9
2 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
openssh-10.0-mlkem-nist.patch
View File

@ -676,7 +676,7 @@ index 670049dcd..463d18771 100644
+ /* generate ECDH key pair, store server pubkey after ciphertext */
+ server_key = nist_pkey_keygen(server_key_len);
+
+ if ((r = get_uncompressed_ec_pubkey(server_key, server_pub, server_key_len) != 0) ||
+ if ((server_key == NULL) || (r = get_uncompressed_ec_pubkey(server_key, server_pub, server_key_len) != 0) ||
+ (r = sshbuf_put(buf, secret, sizeof(secret))) != 0 ||
+ (r = sshbuf_put(server_blob, enc_out, enc_out_len) != 0)||
+ (r = sshbuf_put(server_blob, server_pub, server_key_len)) != 0)

2
openssh.spec
View File

@ -743,6 +743,8 @@ test -f %{sysconfig_anaconda} && \
* Tue Apr 14 2026 Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-26
- Improve keytab detection when obtaining Kerberos tickets on behalf of user on SSH authentication
Related: RHEL-92932
- Add missing NULL check for server key generation in ML-KEM hybrids
Resolves: RHEL-168106
* Wed Apr 01 2026 Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-25
- Fix static analysis issues