linux/poky.git/meta/recipes-core/dropbear, branch yocto-2.7.2

dropbear: update to 2019.78

2019-06-07T12:57:48+00:00

The only change is a regression fix: - Fix dbclient regression in 2019.77. After exiting the terminal would be left in a bad state. Reported by Ryan Woodsmall (From OE-Core rev: 11bc4253e3bc9525a12fafe855bf8d6db4fb81c3) Signed-off-by: Andrej Valek Signed-off-by: Richard Purdie Signed-off-by: Adrian Bunk Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

dropbear: set CVE_PRODUCT

2019-05-12T08:13:39+00:00

(From OE-Core rev: 3364b4160854f69a67bfd78a9a3c985c59251025) Signed-off-by: Chen Qi Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

dropbear: update to 2019.77

2019-03-25T23:19:53+00:00

- update dropbear to version 2019.77 - drop obsolete patch (From OE-Core rev: c0f2e6f74119538a33095c27a8d9e92084741672) Signed-off-by: Andrej Valek Signed-off-by: Richard Purdie

dropbear: remove localoptions.h in source searching

2018-09-22T01:45:46+00:00

- localoptions.h is automatically searched in build directory (From OE-Core rev: 40fe89027e1b9ed63c65ff026bc6cce5de1b814a) Signed-off-by: Andrej Valek Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

dropbear: Fix CVE-2018-15599

2018-09-10T11:13:06+00:00

Wait to fail invalid usernames to fix CVE-2018-15599 Rework 0006-dropbear-configuration-file.patch to fix fuzz warnings (From OE-Core rev: f017715120b67ff02f56ed5db131436ee62aeffb) Signed-off-by: Mingli Yu Signed-off-by: Richard Purdie

dropbear.inc: add dependency on virtual/crypt to fix build with glibc-2.28

2018-08-15T08:44:33+00:00

configure tests crypt() existence with: dnl We test for crypt() specially. On Linux (and others?) it resides in libcrypt dnl but we don't want link all binaries to -lcrypt, just dropbear server. dnl OS X doesn't need -lcrypt AC_CHECK_FUNC(crypt, found_crypt_func=here) AC_CHECK_LIB(crypt, crypt, [ CRYPTLIB="-lcrypt" found_crypt_func=here ]) AC_SUBST(CRYPTLIB) if test "t$found_crypt_func" = there; then AC_DEFINE(HAVE_CRYPT, 1, [crypt() function]) fi but that silently fails with glibc-2.28 and a bit later do_compile fails with; http://errors.yoctoproject.org/Errors/Details/185895/ ../dropbear-2018.76/sysoptions.h:237:3: error: #error "DROPBEAR_SVR_PASSWORD_AUTH requires `crypt()'." #error "DROPBEAR_SVR_PASSWORD_AUTH requires `crypt()'." ^~~~~ Add dependency on virtual/crypt so that do_configure detects it correctly. (From OE-Core rev: d04703aef55e01c59329fc54660724e053f3f66c) Signed-off-by: Martin Jansa Signed-off-by: Richard Purdie

dropbear: add default config file to disable root login

2018-07-09T21:48:38+00:00

root login is disabled by default for openssh and we can enable it through IMAGE_FEATURES 'debug-tweaks' or 'allow-empty-password', so change to the same default behavior for dropbear. (From OE-Core rev: d3e69fa2fef83015658aa5fa1442bab5a8c3edaa) Signed-off-by: Jackie Huang Signed-off-by: Richard Purdie

dropbear: drop obsolete patch 0004-fix-2kb-keys.patch

2018-06-07T07:52:55+00:00

The origins of the patch date back to early 2005 (prior to the start of git history in oe-core) to fix a hardcoded limit on the maximum size of remote host keys: http://familiar.handhelds.narkive.com/b1VGg2bI/problem-w-dropbear-ssh The hardcoded limit was fixed upstream in dropbear 0.47: https://github.com/mkj/dropbear/commit/736f370dce614b717193f45d084e9e009de723ce The patch has therefore been obsolete since then. It went unnoticed until now as the patch has continued to apply - it modifies a value which is not used. (From OE-Core rev: 17072ffc1e765edd45bc1174378fb666185e5643) Signed-off-by: Andre McCurdy Signed-off-by: Richard Purdie

dropbear: drop run time detection of read-only rootfs

2018-06-04T14:15:00+00:00

Previously, when dropbear was started via its init script, relocation of DROPBEAR_RSAKEY_DIR to support read-only rootfs was handled at run time from within the init script. Update the init script to take advantage of the read-only rootfs config setup by read_only_rootfs_hook() and therefore be consistent with startup under systemd (where relocation of DROPBEAR_RSAKEY_DIR is handled by the read_only_rootfs_hook() at build time). (From OE-Core rev: 4990f87b2f6a8b30c8d1c767636e7f5527f595ba) Signed-off-by: Andre McCurdy Signed-off-by: Richard Purdie

dropbear: update to 2018.76

2018-05-04T12:28:04+00:00

- update dropbear to version 2018.76 - refresh and drop obsolete patches - add option to use localoptions.h header file - do not use harden stuff, which leads to QA warning (From OE-Core rev: ec050b666ec3684918fd9dc564d2dce9a8d6a8ef) Signed-off-by: Andrej Valek Signed-off-by: Ross Burton Signed-off-by: Richard Purdie