Skip to content

Commit

Permalink
openssh: Fix pre-authentication remote code execution in sshd.
Browse files Browse the repository at this point in the history
Reported by:	Qualys Threat Research Unit (TRU)
Approved by:	so
Security:	FreeBSD-SA-24:04.openssh
Security:	CVE-2024-6387

Change sshd version string from FreeBSD to CheriBSD as what we're
publishing doesn't match FreeBSD-20240701.

(cherry picked from commit 2abea9d)
  • Loading branch information
ppaeps authored and brooksdavis committed Jul 2, 2024
1 parent 9928e7e commit 1ba73df
Show file tree
Hide file tree
Showing 2 changed files with 3 additions and 1 deletion.
2 changes: 2 additions & 0 deletions crypto/openssh/log.c
Original file line number Diff line number Diff line change
Expand Up @@ -451,12 +451,14 @@ void
sshsigdie(const char *file, const char *func, int line, int showfunc,
LogLevel level, const char *suffix, const char *fmt, ...)
{
#if 0
va_list args;

va_start(args, fmt);
sshlogv(file, func, line, showfunc, SYSLOG_LEVEL_FATAL,
suffix, fmt, args);
va_end(args);
#endif
_exit(1);
}

Expand Down
2 changes: 1 addition & 1 deletion crypto/openssh/version.h
Original file line number Diff line number Diff line change
Expand Up @@ -5,4 +5,4 @@
#define SSH_PORTABLE "p1"
#define SSH_RELEASE SSH_VERSION SSH_PORTABLE

#define SSH_VERSION_FREEBSD "FreeBSD-20240104"
#define SSH_VERSION_FREEBSD "FreeBSD-20240701"

0 comments on commit 1ba73df

Please sign in to comment.