Files
buildroot/package/dropbear/dropbear.hash
Bernd Kuhls c0b1e7e251 package/dropbear: security bump version to 2026.93
https://matt.ucc.asn.au/dropbear/CHANGES

- Security: Fix a use-after-free in X11 forwarding that could possibly lead
  to memory corruption. This is vulnerable to authenticated users if X11
  forwarding is enabled. By default X11 forwarding is not built.
  In 2026.89 the server is running as the authenticated user for X11
  forwarding, in earlier versions it runs as root.
  This removes X11 "single connection" which has probably never been used.
  Reported by @peter-pe
  882f83806d

Added patch to fix build errors which would be introduced by this bump:
86baa66fc9

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 0c8bd5739c)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-07-28 12:04:34 +02:00

8 lines
465 B
Plaintext

# From https://matt.ucc.asn.au/dropbear/releases/SHA256SUM.asc
sha256 310a6087952897c182efbe16088fa0c4d07c467e850a22699472137278fabf09 dropbear-2026.93.tar.bz2
# License file, locally computed
sha256 a99ce657d790b761c132ee7e0de18edb437ae6361e536d991c6a12f36e770445 LICENSE
sha256 8f196cb13afd271f5e267fd29543fc454596382ad580e7592709492843996ac8 libtomcrypt/LICENSE
sha256 2fa64b163659f41965c9815882a8296d3d03ff546b76153e11445f9bdecf955a libtommath/LICENSE