diff mbox series

[v2,1/2] dropbear: switch url to mirror

Message ID 20250514184610.97465-1-peter.marko@siemens.com
State New
Headers show
Series [v2,1/2] dropbear: switch url to mirror | expand

Commit Message

Peter Marko May 14, 2025, 6:46 p.m. UTC 
From: Peter Marko <peter.marko@siemens.com>

Main download page is currently unavailable, switch to mirror listed in
README file of the dropbear repository and release tarballs.

This is to allow upgrade due to CVE, it should be reverted later or
maybe even not merged and feed the tarball only from Yocto mirror until
the main page is up again.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
---
 meta/recipes-core/dropbear/dropbear_2024.86.bb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

Comments

Richard Purdie May 14, 2025, 6:55 p.m. UTC | #1 
On Wed, 2025-05-14 at 20:46 +0200, Peter Marko via
lists.openembedded.org wrote:
> From: Peter Marko <peter.marko@siemens.com>
> 
> Main download page is currently unavailable, switch to mirror listed
> in
> README file of the dropbear repository and release tarballs.
> 
> This is to allow upgrade due to CVE, it should be reverted later or
> maybe even not merged and feed the tarball only from Yocto mirror
> until
> the main page is up again.
> 
> Signed-off-by: Peter Marko <peter.marko@siemens.com>
> ---
>  meta/recipes-core/dropbear/dropbear_2024.86.bb | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/meta/recipes-core/dropbear/dropbear_2024.86.bb
> b/meta/recipes-core/dropbear/dropbear_2024.86.bb
> index be246a0ccd..3b54542490 100644
> --- a/meta/recipes-core/dropbear/dropbear_2024.86.bb
> +++ b/meta/recipes-core/dropbear/dropbear_2024.86.bb
> @@ -12,7 +12,7 @@ DEPENDS = "zlib virtual/crypt"
>  RPROVIDES:${PN} = "ssh sshd"
>  RCONFLICTS:${PN} = "openssh-sshd openssh"
>  
> -SRC_URI =
> "http://matt.ucc.asn.au/dropbear/releases/dropbear-${PV}.tar.bz2 \
> +SRC_URI =
> "https://dropbear.nl/mirror/releases/dropbear-${PV}.tar.bz2 \
>             file://0001-urandom-xauth-changes-to-options.h.patch \
>             file://init \
>             file://dropbearkey.service \
> 

What you could do is add this url to MIRRORS in the recipe? That way
the system should fall back if the main url doesn't work.

Cheers,

Richard
diff mbox series

Patch

diff --git a/meta/recipes-core/dropbear/dropbear_2024.86.bb b/meta/recipes-core/dropbear/dropbear_2024.86.bb
index be246a0ccd..3b54542490 100644
--- a/meta/recipes-core/dropbear/dropbear_2024.86.bb
+++ b/meta/recipes-core/dropbear/dropbear_2024.86.bb
@@ -12,7 +12,7 @@  DEPENDS = "zlib virtual/crypt"
 RPROVIDES:${PN} = "ssh sshd"
 RCONFLICTS:${PN} = "openssh-sshd openssh"
 
-SRC_URI = "http://matt.ucc.asn.au/dropbear/releases/dropbear-${PV}.tar.bz2 \
+SRC_URI = "https://dropbear.nl/mirror/releases/dropbear-${PV}.tar.bz2 \
            file://0001-urandom-xauth-changes-to-options.h.patch \
            file://init \
            file://dropbearkey.service \