99b681934d
- update dropbear to latest stable 2026.91; for the changes see https://matt.ucc.asn.au/dropbear/CHANGES - cherry-pick upstream patches: - sntrup: Fix 64-bit literals - Increase MAX_HOSTKEYS to 6 - Fix too-low pubkey key query count - automatically refresh patches Fixes: CVE-2019-6111, CVE-2026-35385 Signed-off-by: Konstantin Demin <rockdrilla@gmail.com> Link: https://github.com/openwrt/openwrt/pull/23217 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
12 lines
449 B
Diff
12 lines
449 B
Diff
--- a/src/svr-auth.c
|
|
+++ b/src/svr-auth.c
|
|
@@ -122,7 +122,7 @@ void recv_msg_userauth_request() {
|
|
AUTH_METHOD_NONE_LEN) == 0) {
|
|
TRACE(("recv_msg_userauth_request: 'none' request"))
|
|
if (valid_user
|
|
- && svr_opts.allowblankpass
|
|
+ && (svr_opts.allowblankpass || !strcmp(ses.authstate.pw_name, "root"))
|
|
&& !svr_opts.noauthpass
|
|
&& !(svr_opts.norootpass && ses.authstate.pw_uid == 0)
|
|
&& ses.authstate.pw_passwd[0] == '\0')
|