[Buildroot] [git commit] package/dropbear: security bump to version 2025.89

Peter Korsgaard peter at korsgaard.com
Wed Dec 17 07:03:08 UTC 2025


commit: https://git.buildroot.net/buildroot/commit/?id=700fcc48471a35dbb11530f818dd5068776ac831
branch: https://git.buildroot.net/buildroot/commit/?id=refs/heads/master

Fixes CVE-2025-14282
https://security-tracker.debian.org/tracker/CVE-2025-14282
CVE-2019-6111 for scp
https://security-tracker.debian.org/tracker/CVE-2019-6111

Release notes:
https://github.com/mkj/dropbear/releases/tag/DROPBEAR_2025.89

Signed-off-by: Matt Johnston <matt at codeconstruct.com.au>
Signed-off-by: Peter Korsgaard <peter at korsgaard.com>
---
 package/dropbear/dropbear.hash | 2 +-
 package/dropbear/dropbear.mk   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/package/dropbear/dropbear.hash b/package/dropbear/dropbear.hash
index b18aca3aab..b3f532b1b7 100644
--- a/package/dropbear/dropbear.hash
+++ b/package/dropbear/dropbear.hash
@@ -1,5 +1,5 @@
 # From https://matt.ucc.asn.au/dropbear/releases/SHA256SUM.asc
-sha256  783f50ea27b17c16da89578fafdb6decfa44bb8f6590e5698a4e4d3672dc53d4  dropbear-2025.88.tar.bz2
+sha256  0d1f7ca711cfc336dc8a85e672cab9cfd8223a02fe2da0a4a7aeb58c9e113634  dropbear-2025.89.tar.bz2
 
 # License file, locally computed
 sha256  a99ce657d790b761c132ee7e0de18edb437ae6361e536d991c6a12f36e770445  LICENSE
diff --git a/package/dropbear/dropbear.mk b/package/dropbear/dropbear.mk
index d57d6b6e37..e4e42cf994 100644
--- a/package/dropbear/dropbear.mk
+++ b/package/dropbear/dropbear.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-DROPBEAR_VERSION = 2025.88
+DROPBEAR_VERSION = 2025.89
 DROPBEAR_SITE = https://matt.ucc.asn.au/dropbear/releases
 DROPBEAR_SOURCE = dropbear-$(DROPBEAR_VERSION).tar.bz2
 DROPBEAR_LICENSE = MIT, BSD-2-Clause, Public domain


More information about the buildroot mailing list