Subject: CVS commit: pkgsrc/security/dropbear
From: Martti Kuparinen
Date: 2004-08-31 12:27:38
Message id: 20040831102738.BFA032DA1D@cvs.netbsd.org

Log Message:
Updated dropbear to 0.43

- SECURITY: Don't try to free() uninitialised variables in DSS verification
  code. Thanks to Arne Bernin for pointing out this bug. This is possibly
  exploitable, all users with DSS and pubkey-auth compiled in are advised to
  upgrade.

- Clean up agent forwarding socket files correctly, patch from Gerrit Pape.

- Don't go into an infinite loop when portforwarding to servers which don't
  send any initial data/banner. Patch from Nikola Vladov

- Fix for network vs. host byte order in logging remote TCP ports, also
  from Gerrit Pape.

- Initialise many pointers to NULL, for general safety. Also checked cleanup
  code for mp_ints (related to security issues above).

Files:
RevisionActionfile
1.6modifypkgsrc/security/dropbear/Makefile
1.4modifypkgsrc/security/dropbear/distinfo
1.4modifypkgsrc/security/dropbear/patches/patch-aa