Peter Korsgaard 6e2dd4549b dropbear: add upstream security fix for CVE-2018-15599 ...

dropbear is affected by an user enumeration vulnerability similar to the
recent issue in openssh (CVE-2018-15473).  Add an upstream patch fixing the
issue.

For more details, see the discussion on the mailing list:
http://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2018q3/002110.html

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 4a3b0ba38f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

2018-08-27 11:32:38 +02:00

..

0001-only-advertise-single-server-ecdsa-key-when-R-is-used.patch

dropbear: Fix host key loading with 521 bit ecdsa keys

2018-08-27 11:31:16 +02:00

0002-Wait-to-fail-invalid-usernames.patch

dropbear: add upstream security fix for CVE-2018-15599

2018-08-27 11:32:38 +02:00

Config.in

dropbear: unbundle libtomath & libtomcrypt

2018-08-27 11:30:57 +02:00

dropbear.hash

…

dropbear.mk

dropbear: Do not build static binary

2018-08-27 11:31:28 +02:00

dropbear.service

…

S50dropbear

…