mirror of
https://github.com/openwrt/openwrt.git
synced 2026-10-14 15:17:37 +04:00
This fixes the following security problems: CVE-2025-14282: Avoid privilege escalation via unix stream forwarding in Dropbear server. CVE-2019-6111: This allowed a malicious server to overwrite arbitrary local files. This backports two upstream merged PRs: https://github.com/mkj/dropbear/pull/391 https://github.com/mkj/dropbear/pull/394 and this upstream commit: https://github.com/mkj/dropbear/commit/48a17cff6aa104b8e806ddb2191f83f1024060f1 Link: https://github.com/openwrt/openwrt/pull/21192 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>