[Buildroot] [git commit] dropbear: bump version, fixes CVE-2012-0920
Peter Korsgaard
jacmet at sunsite.dk
Fri Feb 24 13:11:16 UTC 2012
commit: http://git.buildroot.net/buildroot/commit/?id=086bdfd378a0eeb85fc18fa7c05fdff64d1a3bea
branch: http://git.buildroot.net/buildroot/commit/?id=refs/heads/master
>From the release notes:
Security: Fix use-after-free bug that could be triggered if command="..."
authorized_keys restrictions are used. Could allow arbitrary code
execution or bypass of the command="..." restriction to an authenticated
user.
Signed-off-by: Peter Korsgaard <jacmet at sunsite.dk>
---
package/dropbear/dropbear-2011.54-no-ipv6.patch | 18 ------------------
package/dropbear/dropbear.mk | 2 +-
2 files changed, 1 insertions(+), 19 deletions(-)
diff --git a/package/dropbear/dropbear-2011.54-no-ipv6.patch b/package/dropbear/dropbear-2011.54-no-ipv6.patch
deleted file mode 100644
index 4ee9aaa..0000000
--- a/package/dropbear/dropbear-2011.54-no-ipv6.patch
+++ /dev/null
@@ -1,18 +0,0 @@
-Check for IPV6_TCLASS instead of IPPROTO_IPV6 since
-it's present on non-IPv6 enabled toolchains too.
-
-Signed-off-by: Gustavo Zacarias <gustavo at zacarias.com.ar>
----
-
-diff -Nura dropbear-2011.54.orig/dbutil.c dropbear-2011.54/dbutil.c
---- dropbear-2011.54.orig/dbutil.c 2011-11-08 09:48:15.000000000 -0300
-+++ dropbear-2011.54/dbutil.c 2011-11-09 12:14:59.430074138 -0300
-@@ -164,7 +164,7 @@
- /* set the TOS bit for either ipv4 or ipv6 */
- #ifdef IPTOS_LOWDELAY
- val = IPTOS_LOWDELAY;
--#ifdef IPPROTO_IPV6
-+#ifdef IPV6_TCLASS
- setsockopt(sock, IPPROTO_IPV6, IPV6_TCLASS, (void*)&val, sizeof(val));
- #endif
- setsockopt(sock, IPPROTO_IP, IP_TOS, (void*)&val, sizeof(val));
diff --git a/package/dropbear/dropbear.mk b/package/dropbear/dropbear.mk
index 5fa50ba..fea96d6 100644
--- a/package/dropbear/dropbear.mk
+++ b/package/dropbear/dropbear.mk
@@ -4,7 +4,7 @@
#
#############################################################
-DROPBEAR_VERSION = 2011.54
+DROPBEAR_VERSION = 2012.55
DROPBEAR_SITE = http://matt.ucc.asn.au/dropbear/releases
DROPBEAR_TARGET_BINS = dbclient dropbearkey dropbearconvert scp ssh
DROPBEAR_MAKE = $(MAKE) MULTI=1 SCPPROGRESS=1 \
More information about the buildroot
mailing list