GNU bug report logs - #24674
Dropbear bundled libraries

Previous Next

Full log

View this message in rfc822 format

From: Leo Famulari <leo <at> famulari.name>
To: zimoun <zimon.toutoune <at> gmail.com>
Cc: 24674 <at> debbugs.gnu.org
Subject: bug#24674: Dropbear bundled libraries
Date: Fri, 18 Dec 2020 16:29:37 -0500

On Fri, Dec 18, 2020 at 08:53:23PM +0100, zimoun wrote:
> with the last update 2020-10-29, I propose to mark it as ’severe’ and
> put it in the list of bugs which should be fixed for the next (or
> next-next) release.  WDYT?

Dropbear 2020.79 includes this text in the CHANGES file:

------
- Upgrade libtomcrypt to 1.18.2 and libtommath to 1.2.0, many thanks to Steffen Jaeckel for
  updating Dropbear to use the current API. Dropbear's configure script will check 
  for sufficient system library versions, otherwise using the bundled versions.
------

And in 2020.80:

------
- Improve checking libtomcrypt version compatibility
------

So, it might be possible now to use "system" copies of these libraries.
Previously, I couldn't figure out how to do it work or if Dropbear would
continue to work correctly.

We have a package of libtommath 1.2.0.

TODO:
1) Package libtomcrypt 1.18.2
2) Try building Dropbear with libtommath and libtomcrypt Guix packages

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.