Bernd Kuhls ce9ed75bbc package/dropbear: security bump version to 2026.92 ...

https://matt.ucc.asn.au/dropbear/CHANGES

- Security: server: Don't allow -B (accept blank password) with
  -t (two factor auth). If run with -t and -B a user configured with a
  blank password would be allowed to log in without pubkey auth.
  23ec782856
  Reported by nvidia

- Security: server: Fix parsing of long authorized_keys lines.
  The remainder of a long line would be handled as the start of a new line.
  In the case where external programs add semi-trusted public keys to
  authorized_keys, a crafted key might bypass restrictions such as "command=".
  8d8e1930b8
  Reported by nvidia

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>

2026-07-10 18:27:37 +02:00

..

Config.in

…

dropbear.hash

package/dropbear: security bump version to 2026.92

2026-07-10 18:27:37 +02:00

dropbear.mk

package/dropbear: security bump version to 2026.92

2026-07-10 18:27:37 +02:00

dropbear.service

…

etc-pam.d-sshd

…

S50dropbear

…