mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-08 00:20:38 -09:00
package/dropbear: security bump version to 2026.93
https://matt.ucc.asn.au/dropbear/CHANGES - Security: Fix a use-after-free in X11 forwarding that could possibly lead to memory corruption. This is vulnerable to authenticated users if X11 forwarding is enabled. By default X11 forwarding is not built. In 2026.89 the server is running as the authenticated user for X11 forwarding, in earlier versions it runs as root. This removes X11 "single connection" which has probably never been used. Reported by @peter-pe882f83806dAdded patch to fix build errors which would be introduced by this bump:86baa66fc9Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
This commit is contained in:
committed by
Julien Olivain
parent
f939799014
commit
0c8bd5739c
40
package/dropbear/0001-scp-fix-build-with-gcc-14.x.patch
Normal file
40
package/dropbear/0001-scp-fix-build-with-gcc-14.x.patch
Normal file
@@ -0,0 +1,40 @@
|
||||
From 0c67372257575f6ec59364aba5ca579c126b7678 Mon Sep 17 00:00:00 2001
|
||||
From: Voxel <voxel@andreev.msk.ru>
|
||||
Date: Tue, 21 Jul 2026 19:28:00 +0200
|
||||
Subject: [PATCH] scp: fix build with gcc >= 14.x
|
||||
MIME-Version: 1.0
|
||||
Content-Type: text/plain; charset=UTF-8
|
||||
Content-Transfer-Encoding: 8bit
|
||||
|
||||
Fixes build errors seen with gcc 14.x:
|
||||
|
||||
src/scp.c: In function ‘sink’:
|
||||
src/scp.c:1214:32: error: implicit declaration of function ‘ascii_isdigit’
|
||||
[-Wimplicit-function-declaration]
|
||||
|
||||
src/scp.c: In function ‘okname’:
|
||||
src/scp.c:1501:22: error: implicit declaration of function ‘ascii_isalpha’
|
||||
[-Wimplicit-function-declaration]
|
||||
|
||||
Upstream: https://github.com/mkj/dropbear/pull/474
|
||||
|
||||
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
|
||||
---
|
||||
src/scp.c | 1 +
|
||||
1 file changed, 1 insertion(+)
|
||||
|
||||
diff --git a/src/scp.c b/src/scp.c
|
||||
index d7266fdd..633b4dba 100644
|
||||
--- a/src/scp.c
|
||||
+++ b/src/scp.c
|
||||
@@ -81,6 +81,7 @@
|
||||
#include "compat.h"
|
||||
#include "scpmisc.h"
|
||||
#include "progressmeter.h"
|
||||
+#include "dbutil.h"
|
||||
|
||||
void bwlimit(int);
|
||||
|
||||
--
|
||||
2.47.3
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
# From https://matt.ucc.asn.au/dropbear/releases/SHA256SUM.asc
|
||||
sha256 91dcb5234de8dea68dd82c55411c9fc986b457ab58372a780ee8a870419c2f7e dropbear-2026.92.tar.bz2
|
||||
sha256 310a6087952897c182efbe16088fa0c4d07c467e850a22699472137278fabf09 dropbear-2026.93.tar.bz2
|
||||
|
||||
# License file, locally computed
|
||||
sha256 a99ce657d790b761c132ee7e0de18edb437ae6361e536d991c6a12f36e770445 LICENSE
|
||||
|
||||
@@ -4,7 +4,7 @@
|
||||
#
|
||||
################################################################################
|
||||
|
||||
DROPBEAR_VERSION = 2026.92
|
||||
DROPBEAR_VERSION = 2026.93
|
||||
DROPBEAR_SITE = https://matt.ucc.asn.au/dropbear/releases
|
||||
DROPBEAR_SOURCE = dropbear-$(DROPBEAR_VERSION).tar.bz2
|
||||
DROPBEAR_LICENSE = MIT, BSD-2-Clause, Public domain
|
||||
|
||||
Reference in New Issue
Block a user