<div dir="ltr"><div>Update dropbear to version 2016.74, which addresses the following vulnerabilities:<br><br></div>CVE-2016-7406<br>CVE-2016-7407<br>CVE-2016-7408<br>CVE-2016-7409<br><div><br><div><br>Signed-off-by: Toan Pham <<a href="mailto:tpham3783@gmail.com">tpham3783@gmail.com</a>><br>--- a/package/network/services/dropbear/Makefile<br>+++ b/package/network/services/dropbear/Makefile<br>@@ -8,14 +8,14 @@<br> include $(TOPDIR)/<a href="http://rules.mk">rules.mk</a><br><br> PKG_NAME:=dropbear<br>-PKG_VERSION:=2015.67<br>+PKG_VERSION:=2016.74<br> PKG_RELEASE:=1<br><br> PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2<br> PKG_SOURCE_URL:= \<br>        <a href="http://matt.ucc.asn.au/dropbear/releases/">http://matt.ucc.asn.au/dropbear/releases/</a> \<br>        <a href="https://dropbear.nl/mirror/releases/">https://dropbear.nl/mirror/releases/</a><br>-PKG_MD5SUM:=e967e320344cd4bfebe321e3ab8514d6<br>+PKG_MD5SUM:=9ad0172731e0f16623937804643b5bd8<br><br> PKG_LICENSE:=MIT<br> PKG_LICENSE_FILES:=LICENSE libtomcrypt/LICENSE libtommath/LICENSE<br>--- a/package/network/services/dropbear/patches/130-ssh_ignore_o_and_x_args.patch<br>+++ /dev/null<br>@@ -1,21 +0,0 @@<br>---- a/cli-runopts.c<br>-+++ b/cli-runopts.c<br>-@@ -315,6 +315,10 @@ void cli_getopts(int argc, char ** argv)<br>-                                       debug_trace = 1;<br>-                                       break;<br>- #endif<br>-+                              case 'o':<br>-+                                      next = &dummy;<br>-+                              case 'x':<br>-+                                      break;<br>-                               case 'F':<br>-                               case 'e':<br>- #ifndef ENABLE_USER_ALGO_LIST<br>-@@ -332,7 +336,6 @@ void cli_getopts(int argc, char ** argv)<br>-                                       print_version();<br>-                                       exit(EXIT_SUCCESS);<br>-                                       break;<br>--                              case 'o':<br>-                               case 'b':<br>-                                       next = &dummy;<br>-                               default:<br><br></div></div></div>