From cc7d7a5730fa57eb891a95b2bbb6ca27d11fb8fc Mon Sep 17 00:00:00 2001 From: Dmitry Belyavskiy Date: Thu, 20 Apr 2023 17:29:37 +0200 Subject: [PATCH] Some non-terminating processes were listening on ports. Resolves: rhbz#2177768 --- openssh-6.7p1-coverity.patch | 27 --------------------------- openssh.spec | 6 +++++- 2 files changed, 5 insertions(+), 28 deletions(-) diff --git a/openssh-6.7p1-coverity.patch b/openssh-6.7p1-coverity.patch index e372f09..f12f40e 100644 --- a/openssh-6.7p1-coverity.patch +++ b/openssh-6.7p1-coverity.patch @@ -74,33 +74,6 @@ diff -up openssh-7.4p1/channels.c.coverity openssh-7.4p1/channels.c close(c->sock); c->sock = c->rfd = c->wfd = sock; channel_find_maxfd(ssh->chanctxt); -@@ -3804,7 +3804,7 @@ int - channel_request_remote_forwarding(struct ssh *ssh, struct Forward *fwd) - { - int r, success = 0, idx = -1; -- char *host_to_connect, *listen_host, *listen_path; -+ char *host_to_connect = NULL, *listen_host = NULL, *listen_path = NULL; - int port_to_connect, listen_port; - - /* Send the forward request to the remote side. */ -@@ -3832,7 +3832,6 @@ channel_request_remote_forwarding(struct - success = 1; - if (success) { - /* Record that connection to this host/port is permitted. */ -- host_to_connect = listen_host = listen_path = NULL; - port_to_connect = listen_port = 0; - if (fwd->connect_path != NULL) { - host_to_connect = xstrdup(fwd->connect_path); -@@ -3853,6 +3852,9 @@ channel_request_remote_forwarding(struct - host_to_connect, port_to_connect, - listen_host, listen_path, listen_port, NULL); - } -+ free(host_to_connect); -+ free(listen_host); -+ free(listen_path); - return idx; - } - diff -up openssh-8.5p1/dns.c.coverity openssh-8.5p1/dns.c --- openssh-8.5p1/dns.c.coverity 2021-03-02 11:31:47.000000000 +0100 +++ openssh-8.5p1/dns.c 2021-03-24 12:03:33.783968166 +0100 diff --git a/openssh.spec b/openssh.spec index a9f129b..3a34c58 100644 --- a/openssh.spec +++ b/openssh.spec @@ -51,7 +51,7 @@ # Do not forget to bump pam_ssh_agent_auth release if you rewind the main package release to 1 %global openssh_ver 8.7p1 -%global openssh_rel 29 +%global openssh_rel 30 %global pam_ssh_agent_ver 0.10.4 %global pam_ssh_agent_rel 5 @@ -761,6 +761,10 @@ test -f %{sysconfig_anaconda} && \ %endif %changelog +* Thu Apr 20 2023 Dmitry Belyavskiy - 8.7p1-30 +- Some non-terminating processes were listening on ports. + Resolves: rhbz#2177768 + * Thu Apr 06 2023 Dmitry Belyavskiy - 8.7p1-29 - Resolve possible self-DoS with some clients Resolves: rhbz#2186473