poky/meta/recipes-core/dropbear/dropbear_2016.72.bb at krogoth - poky - BenGit

mirrors/poky

mirror of https://git.yoctoproject.org/poky synced 2026-05-31 12:49:46 +00:00

Files

T

Sona Sarmadi 58538b0703 dropbear: upgrade to 2016.72

The upgrade addresses CVE-2016-3116:

- Validate X11 forwarding input. Could allow bypass of
  authorized_keys command= restrictions,
  found by github.com/tintinweb.
  Thanks for Damien Miller for a patch. CVE-2016-3116

References:
https://matt.ucc.asn.au/dropbear/CHANGES
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3116

(From OE-Core rev: 5ebac39d1d6dcf041e05002c0b8bf18bfb38e6d3)

Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2016-09-23 15:27:05 +01:00

5 lines

163 B

BlitzBasic

Raw Permalink Blame History

 require dropbear.inc
 SRC_URI[md5sum] = "96226b82725a8cbecad9fc738930d1d2"
 SRC_URI[sha256sum] = "9323766d3257699fd7d6e7b282c5a65790864ab32fd09ac73ea3d46c9ca2d681"