BSD Ports

security/dropbear 2026.94 FreeBSD

SSH 2 server, designed to be usable in small memory environments

System
FreeBSD
Repository
FreeBSD ports
Maintainer
[email protected]
Last update
Commit
4ccdf20f14
License
MIT
Categories
security
Package size
175.4 KiB, 622.8 KiB installed

Description

Dropbear is an SSH 2 server, designed to be usable in small memory environments. It supports:

\* Main features of SSH 2 protocol
\* Implements X11 forwarding, and authentication-agent forwarding
for OpenSSH clients
\* Compatible with OpenSSH ~/.ssh/authorized\_keys public key
authentication

In the other systems

SystemPortVersion
FreeBSDsecurity/dropbear2026.94
OpenBSDsecurity/dropbear2026.94
NetBSDsecurity/dropbear2026.94
DragonFlysecurity/dropbear2022.83_2

Install

Binary package:

pkg install dropbear

From the ports tree:

cd /usr/ports/security/dropbear/ && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	dropbear>0:security/dropbear

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

Repositoryaarch64amd64armv6armv7i386
FreeBSD:14:latest2026.942026.942022.832025.882026.94
FreeBSD:14:quarterly2026.942026.94n/a2025.882026.94
FreeBSD:15:latest2026.942026.94n/a2025.882025.88
FreeBSD:15:quarterly2026.942026.94n/an/an/a
FreeBSD:16:latest2026.942026.94n/an/an/a
FreeBSD:16:quarterlyn/an/an/an/an/a

Dependencies

The Makefile names none itself; they come from USES and USE_*.

The full lists below include those, and their dependencies in turn.

Build dependencies 5
Run dependencies 2

No port depends on this one.

Configuration

Options name: security_dropbear

OptionDefaultDescription
3DESoff
AES128onEnable AES128-based encryption
AES256onEnable AES256-based encryption
CBCoffUse CBC mode for ciphers (less secure)
CHACHA20POLY1305offEnable chacha20poly1305-based encryption
CTRoffUse CTR mode for ciphers
CURVE25519onEnable Curve25519
DSSoffEnable DSS (insecure)
ECDHoffEnable ECDH (insecure)
ECDSAonEnable ECDSA public key support
ED25519onEnable ED25519 public key support
GCMonEnable GCM mode for ciphers (more secure)
GROUP1offEnable Group1 Diffie-Hellman (insecure)
GROUP14_SHA1offEnable Group14 Diffie-Helman with SHA1 (insecure)
GROUP14_SHA256onEnable Group14 Diffie-Helman with SHA256
GROUP16onEnable Group16 Diffie-Hellman
MD5offEnable MD5 MAC (broken)
MLKEM768onEnable mlkem768 key exchange algorithm (recommended)
PORTS_LIBTOMonUse libtomcrypt/libtommath in ports tree
RSAonEnable RSA public key support
RSA_SHA1offEnable RSA SHA1 MAC (insecure)
SHA1offEnable SHA1 MAC (less secure)
SHA1_96offEnable SHA1_96 MAC (less secure)
SHA2_256onEnable SHA2_256 MAC
SHA2_512offEnable SHA2_512 MAC
SMALL_CODEoffMake binary smaller in exchange for 50% performance hit
SNTRUP761onEnable sntrup761 key exchange algorithm (recommended)
STATICoffBuild static executables and/or libraries
X11FWDoffEnable X11 forwarding
USES
cpe gmake tar:bzip2
Service scripts
dropbear

Files

Manual pages 4
  • dbclient(1)
  • dropbear(8)
  • dropbearconvert(1)
  • dropbearkey(1)
pkg-plist 10
  • bin/dbclient
  • bin/dbscp
  • bin/dropbearconvert
  • bin/dropbearkey
  • share/man/man1/dbclient.1.gz
  • share/man/man1/dropbearconvert.1.gz
  • share/man/man1/dropbearkey.1.gz
  • share/man/man8/dropbear.8.gz
  • sbin/dropbear
  • @dir etc/dropbear
distinfo 1
FileSizeSHA256
dropbear-2026.94.tar.bz22.386978e+06e098034a843699200c8c977a991fff73159735bf795d5f72ef672c41a6b1ae81
Master sites 1
  • https://matt.ucc.asn.au/dropbear/releases/

Commit history 1

DateCommitCreditsLog message
4ccdf20f14 Piotr Kubaj security/dropbear: update to 2026.94
PR: 297038 Changelog: 2026.94 - 23 July 2026 Note >> for compatibility/configuration changes - Fix scp build failure regression from 2026.93 The new ascii_isdigit() etc wasn't linked. - >> Print square brackets around ipv6 addresses with ports, eg [2a00:f10:400:2:1c00:bcff:fe00:1c6]:22 This may affect log parsers such as fail2ban. Patch from Seo Suchan - Support longer paths in scp. - Avoid some build warnings, add increase github action coverage of config options. 2026.93 - 21 July 2026 Note >> for compatibility/configuration changes - Security: Fix a use-after-free in X11 forwarding that could possibly lead to memory corruption. This is vulnerable to authenticated users if X11 forwarding is enabled. By default X11 forwarding is not built. …