BSD Ports

security/dropbear 2026.94 NetBSD

Small SSH2 server and client, aimed at embedded market

System
NetBSD
Repository
pkgsrc
Maintainer
[email protected]
Last update
Commit
6706fdf7f4
License
modified-bsd
Categories
security
Package size
174.1 KiB, 757.9 KiB installed

Description

The search for a small Secure Shell server to fit on a laptop with 4 megs ram and no hard disk was fruitless, so Matt Johnston decided to write his own, and Dropbear is the result. It implements various features of the SSH 2 protocol, including X11 and Authentication Agent forwarding. Dropbear is Open Source software, distributed under a MIT-style license. It includes a server, client and tools to generate server keys and to convert OpenSSH keys for Dropbear.

Features

\* A small memory footprint - Dropbear can compile to a 110kB
  statically linked binary with uClibc (and only minimal options
  selected).
\* Implements X11 forwarding, and authentication-agent forwarding
  for OpenSSH clients
\* Compatible with OpenSSH ~/.ssh/authorized\_keys public key
  authentication
\* Features can easily be disabled when compiling to save space.
\* Preliminary TCP forwarding support (-L style only)

In the other systems

SystemPortVersion
NetBSDsecurity/dropbear2026.94
FreeBSDsecurity/dropbear2026.94
OpenBSDsecurity/dropbear2026.94
DragonFlysecurity/dropbear2022.83_2

Install

Binary package:

pkgin install dropbear

From pkgsrc:

cd /usr/pkgsrc/security/dropbear && make install clean

Dependencies

Run dependencies 2

No port depends on this one.

Commit history 2

DateCommitCreditsLog message
6706fdf7f4 adam dropbear: updated to 2026.24
2026.94 - 23 July 2026 - Fix scp build failure regression from 2026.93 The new ascii_isdigit() etc wasn't linked. - Print square brackets around ipv6 addresses with ports, eg [2a00:f10:400:2:1c00:bcff:fe00:1c6]:22 Patch from Seo Suchan - Support longer paths in scp. - Avoid some build warnings, add increase github action coverage of config options. 2026.93 - 21 July 2026 Note >> for compatibility/configuration changes - Security: Fix a use-after-free in X11 forwarding that could possibly lead to memory corruption. This is vulnerable to authenticated users if X11 forwarding is enabled. By default X11 forwarding is not built. In 2026.89 the server is running as the authenticated user for X11 forwarding, in earlier versions it runs as root. …
170bb15b37 adam dropbear: updated to 2026.92
2026.92 - 6 July 2026 Note >> for compatibility/configuration changes - >> server auth plugins have been deprecated, the configure option has been renamed to --enable-plugin-deprecated. Planned to be removed in future. - >> Two factor auth "-t" has been deprecated, it now requires a configuration option DEPRECATED_TWO_FACTOR. Planned to be removed in future. - Security: server: Don't allow -B (accept blank password) with -t (two factor auth). If run with -t and -B a user configured with a blank password would be allowed to log in without pubkey auth. https://github.com/mkj/dropbear/commit/23ec78285639edf068d86bb96f91cba755039740 Reported by nvidia - Security: server: Fix parsing of long authorized_keys lines. …