openwrt/package
Hans Dedecker 97fddb2fdd dropbear: backport upstream fix for CVE-2018-15599
CVE description :
The recv_msg_userauth_request function in svr-auth.c in Dropbear through
2018.76 is prone to a user enumeration vulnerability because username
validity affects how fields in SSH_MSG_USERAUTH messages are handled,
a similar issue to CVE-2018-15473 in an unrelated codebase.

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
(backported from 2211ee0037)
2018-12-18 11:28:11 +01:00
..
base-files base-files: create /etc/ethers by default 2018-12-18 11:28:11 +01:00
boot uboot-lantiq: fix compatibility with gcc7 2018-09-26 20:36:32 +02:00
devel perf: restrict libunwind dependency to archs that actually support libunwind 2018-02-25 17:03:42 +01:00
firmware ath10k-firmware: Fix QCA6174 support 2018-12-18 09:11:03 +01:00
kernel mwlwifi: Update to 10.3.8.0-20180810 2018-12-18 11:28:02 +01:00
libs ustream-ssl: update to latest git HEAD 2018-12-18 11:01:55 +01:00
network dropbear: backport upstream fix for CVE-2018-15599 2018-12-18 11:28:11 +01:00
system ca-certificates: ca-bundle: add symlink for openssl default setting 2018-12-18 09:43:56 +01:00
utils usbutils: Switch to Fedora usbutils 2018-12-18 09:44:03 +01:00
Makefile imagebuilder: reuse rootfs preparation from rootfs.mk 2018-03-07 09:59:08 +01:00