tocsin

Alpine/dropbear: medium 5.4

A flaw was found in Dropbear. When running in multi-user mode and authenticating users, the dropbear ssh server does the socket forwardings requested by the remote client as root,

Action: Upgrade dropbear to 2025.89-r0 or later.

Affected

introducedfixedlast affected
02025.89-r0-

Fixed versions

2025.89-r0

Sources

published · modified · JSON