Hauke Mehrtens 0f52a05723 dropbear: backport security fixes ... This fixes the following security problems: CVE-2025-14282: Avoid privilege escalation via unix stream forwarding in Dropbear server. CVE-2019-6111: This allowed a malicious server to overwrite arbitrary local files. This backports two upstream merged PRs: https://github.com/mkj/dropbear/pull/391 https://github.com/mkj/dropbear/pull/394 and this upstream commit: 48a17cff6a Link: https://github.com/openwrt/openwrt/pull/21192 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>		2025-12-17 21:19:28 +01:00
..
001-Drop-privileges-after-user-authentication.patch	dropbear: backport security fixes	2025-12-17 21:19:28 +01:00
002-Remove-return-code-from-login_login.patch	dropbear: backport security fixes	2025-12-17 21:19:28 +01:00
003-Retain-utmp-saved-group-when-dropping-privileges.patch	dropbear: backport security fixes	2025-12-17 21:19:28 +01:00
004-Limit-rekey-to-current-hostkey-type.patch	dropbear: backport security fixes	2025-12-17 21:19:28 +01:00
005-Restore-seteuid-for-authorized_keys.patch	dropbear: backport security fixes	2025-12-17 21:19:28 +01:00
006-scp-CVE-2019-6111-fix.patch	dropbear: backport security fixes	2025-12-17 21:19:28 +01:00
100-pubkey_path.patch	dropbear: bump to 2024.85	2024-05-09 19:35:20 +02:00
110-change_user.patch	dropbear: backport security fixes	2025-12-17 21:19:28 +01:00
130-ssh_ignore_x_args.patch	dropbear: bump to 2024.85	2024-05-09 19:35:20 +02:00
140-disable_assert.patch	dropbear: bump to 2024.85	2024-05-09 19:35:20 +02:00
160-lto-jobserver.patch	dropbear: bump to 2024.85	2024-05-09 19:35:20 +02:00
600-allow-blank-root-password.patch	dropbear: bump to 2024.85	2024-05-09 19:35:20 +02:00
900-configure-hardening.patch	dropbear: bump to 2024.85	2024-05-09 19:35:20 +02:00
901-bundled-libs-cflags.patch	dropbear: bump to 2024.85	2024-05-09 19:35:20 +02:00
910-signkey-fix-use-of-rsa-sha2-256-pubkeys.patch	dropbear: bump to 2024.85	2024-05-09 19:35:20 +02:00