diff options
| author | Marcin Juszkiewicz <hrw@openembedded.org> | 2005-12-20 12:59:18 +0000 |
|---|---|---|
| committer | OpenEmbedded Project <openembedded-devel@lists.openembedded.org> | 2005-12-20 12:59:18 +0000 |
| commit | 6ff4fc9768de7fc490d215ff6f1fd4b25e505897 (patch) | |
| tree | 503d8f1d0e537ec9d61adb8dc9a17ffcda9a27cf /packages/dropbear/dropbear-0.47/urandom-xauth-changes-to-options.h.patch | |
| parent | dcad9f821f496edc4c81670c06f737a379a78a31 (diff) | |
dropbear: added 0.47
Note from upstream author about 0.47 and fix for older:
This release also fixes a potential security issue, which may allow
authenticated users to run arbitrary code as the server user. I'm unsure
exactly how likely it is to be exploitable, but anyone who's running a
multi-user server is advised to upgrade.
Diffstat (limited to 'packages/dropbear/dropbear-0.47/urandom-xauth-changes-to-options.h.patch')
| -rw-r--r-- | packages/dropbear/dropbear-0.47/urandom-xauth-changes-to-options.h.patch | 21 |
1 files changed, 21 insertions, 0 deletions
diff --git a/packages/dropbear/dropbear-0.47/urandom-xauth-changes-to-options.h.patch b/packages/dropbear/dropbear-0.47/urandom-xauth-changes-to-options.h.patch new file mode 100644 index 0000000000..e2b1dd5da5 --- /dev/null +++ b/packages/dropbear/dropbear-0.47/urandom-xauth-changes-to-options.h.patch @@ -0,0 +1,21 @@ +diff -Nurd dropbear-0.45/options.h dropbear-0.45.patched/options.h +--- dropbear-0.45/options.h 2005-03-06 20:27:02.000000000 -0800 ++++ dropbear-0.45.patched/options.h 2005-03-08 15:25:09.368742090 -0800 +@@ -143,7 +143,7 @@ + * however significantly reduce the security of your ssh connections + * if the PRNG state becomes guessable - make sure you know what you are + * doing if you change this. */ +-#define DROPBEAR_RANDOM_DEV "/dev/random" ++#define DROPBEAR_RANDOM_DEV "/dev/urandom" + + /* prngd must be manually set up to produce output */ + /*#define DROPBEAR_PRNGD_SOCKET "/var/run/dropbear-rng"*/ +@@ -167,7 +167,7 @@ + /* The command to invoke for xauth when using X11 forwarding. + * "-q" for quiet */ + #ifndef XAUTH_COMMAND +-#define XAUTH_COMMAND "/usr/X11R6/bin/xauth -q" ++#define XAUTH_COMMAND "xauth -q" + #endif + + /* if you want to enable running an sftp server (such as the one included with |