Package: dropbear / 2022.83-1+deb12u2

Metadata

Package Version Patches format
dropbear 2022.83-1+deb12u2 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
fix FTBFS on hurd i386.patch | (download)

netio.c | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 fix ftbfs on hurd-i386.

GNU Hurd defines neither IOV_MAX nor UIO_MAXIOV.

support running test_aslr without venv.patch | (download)

test/test_aslr.py | 7 5 + 2 - 0 !
1 file changed, 5 insertions(+), 2 deletions(-)

 support running test_aslr without venv.

Without this patch the test fails because the remote shell can't parse
the command:

    $ ; echo nay
    bash: syntax error near unexpected token `;'

raise connection delay in tests.patch | (download)

test/test_channels.py | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 raise connection delay in tests.

0.1s delay is too short on slower hardware such as the armhf debci
runners (or armhf porterboxes).  Ideally the test would wait for the
listener to actually be available instead of doing guess work, but
raising the delay should be good enough for now.

CVE 2023 48795.patch | (download)

cli-session.c | 11 11 + 0 - 0 !
common-algo.c | 6 6 + 0 - 0 !
common-kex.c | 26 25 + 1 - 0 !
kex.h | 3 3 + 0 - 0 !
process-packet.c | 34 19 + 15 - 0 !
ssh.h | 4 4 + 0 - 0 !
svr-session.c | 3 3 + 0 - 0 !
7 files changed, 71 insertions(+), 16 deletions(-)

 implement strict kex mode

As specified by OpenSSH with kex-strict-c-v00@openssh.com and
kex-strict-s-v00@openssh.com.

fix noremotetcp behavior.patch | (download)

svr-tcpfwd.c | 6 3 + 3 - 0 !
1 file changed, 3 insertions(+), 3 deletions(-)

 src: svr-tcpfwd: fix noremotetcp behavior

If noremotetcp is set, we should still reply with
send_msg_request_failed. This matches the behavior
of !DROPBEAR_SVR_REMOTETCPFWD.

We were seeing keepalive packets being ignored when
the "-k" option was used.