linux/poky.git/meta/recipes-core/dropbear, branch 2.8_M2

dropbear: new feature: disable-weak-ciphers

2019-06-21T14:32:36+00:00

Enhances dropbear with a new feature "disable-weak-ciphers", on by default. This feature disables all CBC, SHA1, and diffie-hellman group1 ciphers in the dropbear ssh server and client. Disable this feature if you need to connect to the ssh server from older clients. Additional customization can be done with local_options.h as usual. Tested: On dropbear_2019.78. Upstream-Status: Inappropriate [configuration] (From OE-Core rev: b11521ce1b1d1f8b4dddf830b41f5ea809730d22) Signed-off-by: Joseph Reynolds Signed-off-by: Richard Purdie

dropbear: add openssh/openssh-sshd as rconflict

2019-05-30T11:37:03+00:00

(From OE-Core rev: 0aa21ae925d81cd10d5c44d4d98c9f06df87139d) Signed-off-by: Changqing Li Signed-off-by: Richard Purdie

dropbear: set CVE_PRODUCT

2019-04-30T11:05:23+00:00

(From OE-Core rev: 3c247a4a166cabf7ddfea403cf272b3fb4e00872) Signed-off-by: Chen Qi Signed-off-by: Richard Purdie

dropbear: update to 2019.78

2019-04-12T13:05:37+00:00

(From OE-Core rev: 4a5e607dac5f0d4ccd220f022002661b66681112) Signed-off-by: Andrej Valek Signed-off-by: Richard Purdie

dropbear: update to 2019.77

2019-03-25T23:19:53+00:00

- update dropbear to version 2019.77 - drop obsolete patch (From OE-Core rev: c0f2e6f74119538a33095c27a8d9e92084741672) Signed-off-by: Andrej Valek Signed-off-by: Richard Purdie

dropbear: remove localoptions.h in source searching

2018-09-22T01:45:46+00:00

- localoptions.h is automatically searched in build directory (From OE-Core rev: 40fe89027e1b9ed63c65ff026bc6cce5de1b814a) Signed-off-by: Andrej Valek Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

dropbear: Fix CVE-2018-15599

2018-09-10T11:13:06+00:00

Wait to fail invalid usernames to fix CVE-2018-15599 Rework 0006-dropbear-configuration-file.patch to fix fuzz warnings (From OE-Core rev: f017715120b67ff02f56ed5db131436ee62aeffb) Signed-off-by: Mingli Yu Signed-off-by: Richard Purdie

dropbear.inc: add dependency on virtual/crypt to fix build with glibc-2.28

2018-08-15T08:44:33+00:00

configure tests crypt() existence with: dnl We test for crypt() specially. On Linux (and others?) it resides in libcrypt dnl but we don't want link all binaries to -lcrypt, just dropbear server. dnl OS X doesn't need -lcrypt AC_CHECK_FUNC(crypt, found_crypt_func=here) AC_CHECK_LIB(crypt, crypt, [ CRYPTLIB="-lcrypt" found_crypt_func=here ]) AC_SUBST(CRYPTLIB) if test "t$found_crypt_func" = there; then AC_DEFINE(HAVE_CRYPT, 1, [crypt() function]) fi but that silently fails with glibc-2.28 and a bit later do_compile fails with; http://errors.yoctoproject.org/Errors/Details/185895/ ../dropbear-2018.76/sysoptions.h:237:3: error: #error "DROPBEAR_SVR_PASSWORD_AUTH requires `crypt()'." #error "DROPBEAR_SVR_PASSWORD_AUTH requires `crypt()'." ^~~~~ Add dependency on virtual/crypt so that do_configure detects it correctly. (From OE-Core rev: d04703aef55e01c59329fc54660724e053f3f66c) Signed-off-by: Martin Jansa Signed-off-by: Richard Purdie

dropbear: add default config file to disable root login

2018-07-09T21:48:38+00:00

root login is disabled by default for openssh and we can enable it through IMAGE_FEATURES 'debug-tweaks' or 'allow-empty-password', so change to the same default behavior for dropbear. (From OE-Core rev: d3e69fa2fef83015658aa5fa1442bab5a8c3edaa) Signed-off-by: Jackie Huang Signed-off-by: Richard Purdie

dropbear: drop obsolete patch 0004-fix-2kb-keys.patch

2018-06-07T07:52:55+00:00

The origins of the patch date back to early 2005 (prior to the start of git history in oe-core) to fix a hardcoded limit on the maximum size of remote host keys: http://familiar.handhelds.narkive.com/b1VGg2bI/problem-w-dropbear-ssh The hardcoded limit was fixed upstream in dropbear 0.47: https://github.com/mkj/dropbear/commit/736f370dce614b717193f45d084e9e009de723ce The patch has therefore been obsolete since then. It went unnoticed until now as the patch has continued to apply - it modifies a value which is not used. (From OE-Core rev: 17072ffc1e765edd45bc1174378fb666185e5643) Signed-off-by: Andre McCurdy Signed-off-by: Richard Purdie