From 086bdfd378a0eeb85fc18fa7c05fdff64d1a3bea Mon Sep 17 00:00:00 2001 From: Peter Korsgaard Date: Fri, 24 Feb 2012 14:11:16 +0100 Subject: dropbear: bump version, fixes CVE-2012-0920 From the release notes: Security: Fix use-after-free bug that could be triggered if command="..." authorized_keys restrictions are used. Could allow arbitrary code execution or bypass of the command="..." restriction to an authenticated user. Signed-off-by: Peter Korsgaard --- package/dropbear/dropbear-2011.54-no-ipv6.patch | 18 ------------------ 1 file changed, 18 deletions(-) delete mode 100644 package/dropbear/dropbear-2011.54-no-ipv6.patch (limited to 'package/dropbear/dropbear-2011.54-no-ipv6.patch') diff --git a/package/dropbear/dropbear-2011.54-no-ipv6.patch b/package/dropbear/dropbear-2011.54-no-ipv6.patch deleted file mode 100644 index 4ee9aaa66..000000000 --- a/package/dropbear/dropbear-2011.54-no-ipv6.patch +++ /dev/null @@ -1,18 +0,0 @@ -Check for IPV6_TCLASS instead of IPPROTO_IPV6 since -it's present on non-IPv6 enabled toolchains too. - -Signed-off-by: Gustavo Zacarias ---- - -diff -Nura dropbear-2011.54.orig/dbutil.c dropbear-2011.54/dbutil.c ---- dropbear-2011.54.orig/dbutil.c 2011-11-08 09:48:15.000000000 -0300 -+++ dropbear-2011.54/dbutil.c 2011-11-09 12:14:59.430074138 -0300 -@@ -164,7 +164,7 @@ - /* set the TOS bit for either ipv4 or ipv6 */ - #ifdef IPTOS_LOWDELAY - val = IPTOS_LOWDELAY; --#ifdef IPPROTO_IPV6 -+#ifdef IPV6_TCLASS - setsockopt(sock, IPPROTO_IPV6, IPV6_TCLASS, (void*)&val, sizeof(val)); - #endif - setsockopt(sock, IPPROTO_IP, IP_TOS, (void*)&val, sizeof(val)); -- cgit v1.2.3