[Bug 294996] security/dropbear: missing old insecure options with recent version

From: <bugzilla-noreply_at_freebsd.org>
Date: Mon, 04 May 2026 09:29:57 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294996

            Bug ID: 294996
           Summary: security/dropbear: missing old insecure options with
                    recent version
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: pkubaj@FreeBSD.org
          Reporter: bugs-freebsd-org916@ketas.si.pri.ee
          Assignee: pkubaj@FreeBSD.org
             Flags: maintainer-feedback?(pkubaj@FreeBSD.org)

due to options changed between

--- dropbear-2024.86/src/default_options.h 2024-10-22 17:30:00.000000000 +0300
+++ dropbear-2025.89/src/default_options.h 2025-12-16 16:30:00.000000000 +0200

i now need

#define DROPBEAR_SHA1_HMAC 1
#define DROPBEAR_RSA_SHA1 1
#define DROPBEAR_DH_GROUP14_SHA1 1

in

${WRKSRC}/localoptions.h

to connect old hosts

makefile needs updates to turn those on too, not just off

-- 
You are receiving this mail because:
You are the assignee for the bug.