Search results

Ed25519 signature verification accepts non-canonical public keys (y >= p), breaking RFC 8032 uniqueness

Status: Open.

#408 In mkj/dropbear;

· py-thok opened on Mar 1, 2026

Ed25519 Signature Malleability in Dropbear Due to Missing S Range Check

Status: Open.

#406 In mkj/dropbear;

· py-thok opened on Feb 23, 2026

User Enumeration via Timing Side-Channel in Public Key Authentication

Status: Open.

#401 In mkj/dropbear;

· XK3NF4 opened on Jan 28, 2026

reversed logic when checking for service == "ssh-connection" in src/svr-auth.c

bug

Status: Open.

#397 In mkj/dropbear;

· turistu opened on Jan 12, 2026

Support for unix domain socket forwarding

Status: Open.

#389 In mkj/dropbear;

· bdentino opened on Nov 27, 2025

FAILED test_channels.py::test_tcpflushout[L-1] - OSError: [Errno 98] Address already in use

build

Status: Open.

#386 In mkj/dropbear;

· vt-alt opened on Oct 12, 2025

permitopen after no-port-forwarding should allow local port forwarding while disabling all other forms of port forwarding

feature request

Status: Open.

#383 In mkj/dropbear;

· mitar opened on Sep 17, 2025

Support for permitlisten in authorized keys file

feature request

Status: Open.

#382 In mkj/dropbear;

· mitar opened on Sep 17, 2025

Warnings compiling scp.c and progressmeter.c

build

Status: Open.

#381 In mkj/dropbear;

· prpr19xx opened on Sep 14, 2025

SSH pipe not closed when receiving side closes

channels

Status: Open.

#379 In mkj/dropbear;

· ghewson opened on Aug 15, 2025

Non-privileged users can‘t login via dropbear

Status: Open.

#378 In mkj/dropbear;

· green-free opened on Aug 12, 2025

dropbear is unable to process user-specified command if ssh client has an empty file as input (stdio redirection)

bug

channels

regression

Status: Open.

#365 In mkj/dropbear;

· aap-sc opened on May 12, 2025