Path to this page:
Subject: CVS commit: pkgsrc/security/dropbear
From: Martti Kuparinen
Date: 2004-08-31 12:27:38
Message id: 20040831102738.BFA032DA1D@cvs.netbsd.org
Log Message:
Updated dropbear to 0.43
- SECURITY: Don't try to free() uninitialised variables in DSS verification
code. Thanks to Arne Bernin for pointing out this bug. This is possibly
exploitable, all users with DSS and pubkey-auth compiled in are advised to
upgrade.
- Clean up agent forwarding socket files correctly, patch from Gerrit Pape.
- Don't go into an infinite loop when portforwarding to servers which don't
send any initial data/banner. Patch from Nikola Vladov
- Fix for network vs. host byte order in logging remote TCP ports, also
from Gerrit Pape.
- Initialise many pointers to NULL, for general safety. Also checked cleanup
code for mp_ints (related to security issues above).
Files: