diff options
| author | Konstantin Demin <rockdrilla@gmail.com> | 2024-01-09 03:40:01 +0300 |
|---|---|---|
| committer | Hauke Mehrtens <hauke@hauke-m.de> | 2024-03-15 23:53:01 +0100 |
| commit | 6549a711be6cb9788aaaec6d31e3396b21893163 (patch) | |
| tree | c5dc590a320831f60d50fbdf79a5494f47419320 /package/kernel/button-hotplug/src | |
| parent | 6961fe98ecfb47655893606265c5426995dfbb3f (diff) | |
| download | upstream-6549a711be6cb9788aaaec6d31e3396b21893163.tar.gz upstream-6549a711be6cb9788aaaec6d31e3396b21893163.tar.bz2 upstream-6549a711be6cb9788aaaec6d31e3396b21893163.zip | |
dropbear: cherry-pick upstream patches
critical fixes:
- libtommath: possible integer overflow (CVE-2023-36328)
- implement Strict KEX mode (CVE-2023-48795)
various fixes:
- fix DROPBEAR_DSS and DROPBEAR_RSA config options
- y2038 issues
- remove SO_LINGER socket option
- make banner reading failure non-fatal
- fix "noremotetcp" behavior
- don't try to shutdown a pty
- fix test for multiuser kernels
adds new features:
- option to bind to interface
- allow inetd with non-syslog
- ignore unsupported command line options with dropbearkey
Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
(cherry picked from commit b5cde260487eae86db1661a53e5e5e0823936aab)
[Only add the patches fixing security problems]
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
Tested-by: Stijn Segers <foss@volatilesystems.org>
Diffstat (limited to 'package/kernel/button-hotplug/src')
0 files changed, 0 insertions, 0 deletions