linux/poky.git/meta/recipes-core/dropbear, branch styhead-5.1.3

dropbear: upgrade 2024.84 -> 2024.85

2024-05-28T08:38:23+00:00

Changelog: https://matt.ucc.asn.au/dropbear/CHANGES This release fixes build regressions in 2024.84: - Fix build failure when SHA1 is disabled - Fix build failure when DROPBEAR_CLI_PUBKEY_AUTH disabled - Update debian/ directory with changed paths (From OE-Core rev: 62ad8e8217548d7f9aab506a3611ef41f4881cf3) Signed-off-by: Yi Zhao Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

recipes: Update WORKDIR references to UNPACKDIR

2024-05-02T14:15:51+00:00

Since we want to be able to stop unpacking to WORKDIR, correct the WORKDIR references in recipe do_compile/do_install tasks to use UNPACKDIR in the appropraite places instead. (From OE-Core rev: d73595df69667fe9d12ecd407b77a0b8dae2109c) Signed-off-by: Richard Purdie

dropbear: upgrade 2022.83 -> 2024.84

2024-04-23T12:40:24+00:00

0001-urandom-xauth-changes-to-options.h.patch dropbear-disable-weak-ciphers.patch 0005-dropbear-enable-pam.patch 0006-dropbear-configuration-file.patch refreshed for 2024.84 CVE-2023-36328.patch removed since it's included in 2024.84 (From OE-Core rev: c50a0d013137338ac1dec60f6aed32ff3a185839) Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

dropbear: remove unnecessary line

2024-02-02T11:06:17+00:00

This line was added in 703e3faaec8c5a22, however the default value of FILES:${PN} contains "${bindir}/*", so this directory does not need to be explicitly added. (From OE-Core rev: 53f9fa7b7913f4d8a480e85a7b6a943f1125bb19) Signed-off-by: Etienne Cordonnier Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

dropbear: fix CVE-2023-36328

2023-09-09T21:14:41+00:00

Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary code and cause a denial of service (DoS). References: https://nvd.nist.gov/vuln/detail/CVE-2023-36328 https://github.com/libtom/libtommath/pull/546 (From OE-Core rev: aa392840d625f5c45832e7ddf60c4dfaba3c4287) Signed-off-by: Yogita Urade Signed-off-by: Richard Purdie

dropbear: upgrade 2022.82 -> 2022.83

2022-12-06T15:23:18+00:00

0007-Fix-X11-build-failure-use-DROPBEAR_PRIO_LOWDELAY.patch removed since it's included in 2022.83 Changelog: ========== - Disable DROPBEAR_DSS by default - Added DROPBEAR_RSA_SHA1 option to allow disabling sha1 rsa signatures. - Add option for requiring both password and pubkey (-t) - Add 'no-touch-required' and 'verify-required' options for sk keys DROPBEAR_SK_KEYS config option now replaces separate DROPBEAR_SK_ECDSA and DROPBEAR_SK_ED25519 options. - Add 'permitopen' option for authorized_keys to restrict forwarded ports - Added LTM_CFLAGS configure argument to set flags for building bundled libtommath. This also restores the previous arguments used in 2020.81 (-O3 -funroll-loops). That gives a big speedup for RSA key generation, which regressed in 2022.82. There is a tradeoff with code size, so -Os can be used if required. - Add '-z' flag to disable setting QoS traffic class. This may be necessary to work with broken networks or network drivers, exposed after changes to use AF21 in 2022.82 - Allow overriding user shells with COMPAT_USER_SHELLS - Improve permission error message - Remove HMAC_MD5 entirely (From OE-Core rev: 99759005f18f0533717696729978d8dc5bf4ad16) Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

dropbear: add pam to PACKAGECONFIG

2022-10-25T12:42:03+00:00

Add pam to PACKAGECONFIG to make the code cleaner. (From OE-Core rev: 4d0c566a79cf7c0b7c86eaa7c99aa185fcf37bb5) Signed-off-by: Ming Liu Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

dropbear: Add enable-x11-forwarding PACKAGECONFIG option

2022-09-29T20:15:50+00:00

Add the option to enable X11 forwarding in dropbear with a new PACKAGECONFIG option ('enable-x11-forwarding'). Method uses localoption.h file for dropbear feature selection. Add backport patch to fix X11 forwarding in the current 2022.82 version. (From OE-Core rev: f09d94979fd98f160ef7157b517489a43086333f) Signed-off-by: Daniel Gomez Signed-off-by: Richard Purdie

dropbear: merge .inc into .bb

2022-08-14T07:13:32+00:00

(From OE-Core rev: e4e21f272a897bd89ffbc9d057db56eae944c70b) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

dropbear: Add configuration file to CONFFILES

2022-07-23T12:55:25+00:00

Avoid overwriting the dropbear configuration when the package gets updated by adding it to the CONFFILES list. Before: root@qt5222:~# dpkg -i dropbear_2022.82-r0.26_amd64.deb (Reading database ... 32509 files and directories currently installed.) Preparing to unpack dropbear_2022.82-r0.26_amd64.deb ... Unpacking dropbear (2022.82-r0.26) over (2022.82-r0.25) ... Setting up dropbear (2022.82-r0.26) ... update-alternatives: Linking /usr/bin/scp to /usr/sbin/dropbearmulti update-alternatives: Linking /usr/bin/ssh to /usr/sbin/dropbearmulti After: root@qt5222:~# dpkg -i dropbear_2022.82-r0.27_amd64.deb (Reading database ... 32509 files and directories currently installed.) Preparing to unpack dropbear_2022.82-r0.27_amd64.deb ... Unpacking dropbear (2022.82-r0.27) over (2022.82-r0.26) ... Setting up dropbear (2022.82-r0.27) ... Configuration file '/etc/default/dropbear' ==> File on system created by you or by a script. ==> File also in package provided by package maintainer. What would you like to do about it ? Your options are: Y or I : install the package maintainer's version N or O : keep your currently-installed version D : show the differences between the versions Z : start a shell to examine the situation The default action is to keep your current version. *** dropbear (Y/I/N/O/D/Z) [default=N] ? (From OE-Core rev: e8809c00d7414faeb601970faa3e9caf5deb39cf) Signed-off-by: Daniel Gomez Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie