CVS commit: pkgsrc/security/dropbear

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Mon Aug 24 13:09:40 UTC 2026

Modified Files:
        pkgsrc/security/dropbear: Makefile distinfo

Log Message:
dropbear: updated to 2026.24

2026.94 - 23 July 2026

- Fix scp build failure regression from 2026.93
  The new ascii_isdigit() etc wasn't linked.

- Print square brackets around ipv6 addresses with ports, eg
  [2a00:f10:400:2:1c00:bcff:fe00:1c6]:22
  Patch from Seo Suchan

- Support longer paths in scp.

- Avoid some build warnings, add increase github action coverage of
  config options.

2026.93 - 21 July 2026

Note >> for compatibility/configuration changes

- Security: Fix a use-after-free in X11 forwarding that could possibly lead
  to memory corruption. This is vulnerable to authenticated users if X11
  forwarding is enabled. By default X11 forwarding is not built.
  In 2026.89 the server is running as the authenticated user for X11
  forwarding, in earlier versions it runs as root.
  This removes X11 "single connection" which has probably never been used.
  Reported by @peter-pe
  https://github.com/mkj/dropbear/commit/882f83806d5e133037cd28e954a878984ef7b9c4

- >> "permitlisten" authorized_keys lines will now be ignored if
  the port is invalid (>65535). From Basavaraj S Maneppagol.

- >> In 2026.92, the configure option --enable-plugin-deprecated
  wasn't correctly renamed. This is now implemented.
  Patch from Alexander Dahl

- Two factor auth "-t" is no longer deprecated, it will be kept.
  The "DEPRECATED_TWO_FACTOR" option is ignored, and no longer required.

- Fix out of bounds read during utmp/wtmp log file handling, reported by
  Basavaraj S Maneppagol.

- More robust handling of ascii inputs for some platforms.
  From Basavaraj S Maneppagol

- Convert manpages to mdoc format, from shrub


To generate a diff of this commit:
cvs rdiff -u -r1.48 -r1.49 pkgsrc/security/dropbear/Makefile
cvs rdiff -u -r1.40 -r1.41 pkgsrc/security/dropbear/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/dropbear/Makefile
diff -u pkgsrc/security/dropbear/Makefile:1.48 pkgsrc/security/dropbear/Makefile:1.49
--- pkgsrc/security/dropbear/Makefile:1.48      Tue Jul  7 08:27:23 2026
+++ pkgsrc/security/dropbear/Makefile   Mon Aug 24 13:09:40 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.48 2026/07/07 08:27:23 adam Exp $
+# $NetBSD: Makefile,v 1.49 2026/08/24 13:09:40 adam Exp $
 
-DISTNAME=      dropbear-2026.92
+DISTNAME=      dropbear-2026.94
 CATEGORIES=    security
 MASTER_SITES=  https://matt.ucc.asn.au/dropbear/releases/
 EXTRACT_SUFX=  .tar.bz2

Index: pkgsrc/security/dropbear/distinfo
diff -u pkgsrc/security/dropbear/distinfo:1.40 pkgsrc/security/dropbear/distinfo:1.41
--- pkgsrc/security/dropbear/distinfo:1.40      Tue Jul  7 08:27:23 2026
+++ pkgsrc/security/dropbear/distinfo   Mon Aug 24 13:09:40 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.40 2026/07/07 08:27:23 adam Exp $
+$NetBSD: distinfo,v 1.41 2026/08/24 13:09:40 adam Exp $
 
-BLAKE2s (dropbear-2026.92.tar.bz2) = 0913c6c614747cf47cb499c9a6dfd0f26bfdbb296c20d2bc83e6b01956e4aec1
-SHA512 (dropbear-2026.92.tar.bz2) = 74701cf1a47c38a8236f89bf8f06701856b958d48e64945d1e0ee9c9765fc71a06549d6a4e7d2737d00ce945265673068889550d2f1cf3782a5cf19e96819f45
-Size (dropbear-2026.92.tar.bz2) = 2383311 bytes
+BLAKE2s (dropbear-2026.94.tar.bz2) = 73b8bfc0665403464c70456668f48e350ee22d51def8e1898f3129331afde7f0
+SHA512 (dropbear-2026.94.tar.bz2) = f69017908533353740167450f678659990d28534a1524efca578ab378ab3ff03e43fe0f9a6f74d9acd4c7f16187c074373009f1cd231efe9865e337e03ce0d51
+Size (dropbear-2026.94.tar.bz2) = 2386978 bytes
 SHA1 (patch-Makefile.in) = 0bb649ed8688666513c35e139e7e349fd83b3a1b
 SHA1 (patch-configure) = b17f647043b212adda53aad7fb8dc7e639be9494
 SHA1 (patch-localoptions.h) = 59ddfe3717e7fb961f597be7645557e11bd6e9fb