package/dropbear: security bump version to 2026.93

https://matt.ucc.asn.au/dropbear/CHANGES

- Security: Fix a use-after-free in X11 forwarding that could possibly lead
  to memory corruption. This is vulnerable to authenticated users if X11
  forwarding is enabled. By default X11 forwarding is not built.
  In 2026.89 the server is running as the authenticated user for X11
  forwarding, in earlier versions it runs as root.
  This removes X11 "single connection" which has probably never been used.
  Reported by @peter-pe
  882f83806d

Added patch to fix build errors which would be introduced by this bump:
86baa66fc9

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
This commit is contained in:
Bernd Kuhls
2026-07-21 19:59:38 +02:00
committed by Julien Olivain
parent f939799014
commit 0c8bd5739c
3 changed files with 42 additions and 2 deletions

View File

@@ -0,0 +1,40 @@
From 0c67372257575f6ec59364aba5ca579c126b7678 Mon Sep 17 00:00:00 2001
From: Voxel <voxel@andreev.msk.ru>
Date: Tue, 21 Jul 2026 19:28:00 +0200
Subject: [PATCH] scp: fix build with gcc >= 14.x
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Fixes build errors seen with gcc 14.x:
src/scp.c: In function sink:
src/scp.c:1214:32: error: implicit declaration of function ascii_isdigit
[-Wimplicit-function-declaration]
src/scp.c: In function okname:
src/scp.c:1501:22: error: implicit declaration of function ascii_isalpha
[-Wimplicit-function-declaration]
Upstream: https://github.com/mkj/dropbear/pull/474
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
---
src/scp.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/src/scp.c b/src/scp.c
index d7266fdd..633b4dba 100644
--- a/src/scp.c
+++ b/src/scp.c
@@ -81,6 +81,7 @@
#include "compat.h"
#include "scpmisc.h"
#include "progressmeter.h"
+#include "dbutil.h"
void bwlimit(int);
--
2.47.3

View File

@@ -1,5 +1,5 @@
# From https://matt.ucc.asn.au/dropbear/releases/SHA256SUM.asc
sha256 91dcb5234de8dea68dd82c55411c9fc986b457ab58372a780ee8a870419c2f7e dropbear-2026.92.tar.bz2
sha256 310a6087952897c182efbe16088fa0c4d07c467e850a22699472137278fabf09 dropbear-2026.93.tar.bz2
# License file, locally computed
sha256 a99ce657d790b761c132ee7e0de18edb437ae6361e536d991c6a12f36e770445 LICENSE

View File

@@ -4,7 +4,7 @@
#
################################################################################
DROPBEAR_VERSION = 2026.92
DROPBEAR_VERSION = 2026.93
DROPBEAR_SITE = https://matt.ucc.asn.au/dropbear/releases
DROPBEAR_SOURCE = dropbear-$(DROPBEAR_VERSION).tar.bz2
DROPBEAR_LICENSE = MIT, BSD-2-Clause, Public domain