projects / librecmc / librecmc.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: a5ab8f0) | patch
dropbear: Fix CVE-2020-36254
authorHauke Mehrtens <hauke@hauke-m.de>
Sun, 2 May 2021 15:35:16 +0000 (17:35 +0200)
committerRISCi_ATOM <bob@bobcall.me>
Wed, 19 May 2021 13:49:45 +0000 (09:49 -0400)
commit1ebe1c794ce74290d011458605946d78a28855a4
treedde2df42465e95124a4fe63fcf4523ec6404dc2btree | snapshot
parenta5ab8f00477c37a3c88919a74058ede1f38a9014commit | diff
dropbear: Fix CVE-2020-36254

This backports a fix from dropbear 2020.81.
CVE-2020-36254 description:
scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
package/network/services/dropbear/patches/001-fix-CVE-2020-36254.patch [new file with mode: 0644] blob