summaryrefslogtreecommitdiff
path: root/security/openssh/patches/patch-ax
diff options
context:
space:
mode:
Diffstat (limited to 'security/openssh/patches/patch-ax')
-rw-r--r--security/openssh/patches/patch-ax18
1 files changed, 18 insertions, 0 deletions
diff --git a/security/openssh/patches/patch-ax b/security/openssh/patches/patch-ax
new file mode 100644
index 00000000000..581b9f1afab
--- /dev/null
+++ b/security/openssh/patches/patch-ax
@@ -0,0 +1,18 @@
+$NetBSD: patch-ax,v 1.5 2008/04/03 07:59:08 tonnerre Exp $
+
+Don't deadlock on exit with multiple X forwarded channels.
+Don't use X11 port which can't be bound on all IP families.
+Fixes CVE-2008-1483.
+
+--- channels.c.orig 2007-06-25 09:04:47.000000000 +0000
++++ channels.c
+@@ -2905,9 +2905,6 @@ x11_create_display_inet(int x11_display_
+ debug2("bind port %d: %.100s", port, strerror(errno));
+ close(sock);
+
+- if (ai->ai_next)
+- continue;
+-
+ for (n = 0; n < num_socks; n++) {
+ close(socks[n]);
+ }