Debian Bug report logs - #495795
dropbear: please provide the scp binary

version graph

Package: dropbear; Maintainer for dropbear is Gerrit Pape <pape@smarden.org>; Source for dropbear is src:dropbear.

Reported by: Luca Capello <luca@pca.it>

Date: Wed, 20 Aug 2008 13:45:02 UTC

Severity: wishlist

Found in version dropbear/0.51-1

Reply or subscribe to this bug.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, Luca Capello <luca@pca.it>, "ML Debian FreeSmartphone.Org Team" <pkg-fso-maint@lists.alioth.debian.org>, Gerrit Pape <pape@smarden.org>:
Bug#495795; Package dropbear. Full text and rfc822 format available.

Acknowledgement sent to Luca Capello <luca@pca.it>:
New Bug report received and forwarded. Copy sent to Luca Capello <luca@pca.it>, "ML Debian FreeSmartphone.Org Team" <pkg-fso-maint@lists.alioth.debian.org>, Gerrit Pape <pape@smarden.org>. Full text and rfc822 format available.

Message #5 received at submit@bugs.debian.org (full text, mbox):

From: Luca Capello <luca@pca.it>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: dropbear: please provide the scp binary
Date: Wed, 20 Aug 2008 15:42:36 +0200
[Message part 1 (text/plain, inline)]
Package: dropbear
Version: 0.51-1
Severity: wishlist

Hello,

according to the Debian changelog [1], dropbear in Debian doesn't ship
the scp binary, which is a problem when installed on embedded devices,
like the Openmoko FreeRunner (GTA02) [2].

Is there any specific reason the scp binary is not compiled in?
Installing openssh-client requires 2MB, which can be a problem on small
flash memories.

Thx, bye,
Gismo / Luca

PS, I cc:ed the pkg-fso-maint mailing list, since this bug directly
    concerns Openmoko users :-)

Footnotes: 
[1] the first and only occurrence is in version 0.48-1:
    =====
    dropbear (0.48-1) unstable; urgency=medium

      * New upstream release.
      * SECURITY: Improve handling of denial of service attempts from a single
        IP.

      * debian/implicit: update to revision 1.11.
      * new upstream release updates to scp from OpenSSH 4.3p2 - fixes a
        security issue where use of system() could cause users to execute
        arbitrary code through malformed filenames; CVE-2006-0225 (see also
        #349645); the scp binary is not provided by this package though.

     -- Gerrit Pape <pape@smarden.org>  Fri, 10 Mar 2006 22:00:32 +0000
    =====
[2] http://lists.alioth.debian.org/pipermail/pkg-fso-maint/2008-August/000006.html

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: armel (armv4tl)

Kernel: Linux 2.6.24 (PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages dropbear depends on:
ii  libc6                  2.7-13            GNU C Library: Shared libraries
ii  libgcc1                1:4.3.1-9         GCC support library
ii  zlib1g                 1:1.2.3.3.dfsg-12 compression library - runtime

dropbear recommends no packages.

Versions of packages dropbear suggests:
pn  openssh-client                <none>     (no description available)
pn  runit                         <none>     (no description available)

-- no debconf information
[Message part 2 (application/pgp-signature, inline)]

Information forwarded to debian-bugs-dist@lists.debian.org, Gerrit Pape <pape@smarden.org>:
Bug#495795; Package dropbear. (Mon, 16 Aug 2010 17:15:03 GMT) Full text and rfc822 format available.

Acknowledgement sent to "W. Martin Borgert" <debacle@debian.org>:
Extra info received and forwarded to list. Copy sent to Gerrit Pape <pape@smarden.org>. (Mon, 16 Aug 2010 17:15:03 GMT) Full text and rfc822 format available.

Message #10 received at 495795@bugs.debian.org (full text, mbox):

From: "W. Martin Borgert" <debacle@debian.org>
To: 495795@bugs.debian.org
Cc: luca@pca.it, tbm@cyrius.com
Subject: dropbear: please provide the scp binary
Date: Mon, 16 Aug 2010 19:14:11 +0200
Hi,

any chance to get this fixed? It would be very helpful to
have an scp binary for an embedded system. In 2008-12 it
hasn't been included, because we were already in the
freeze for Lenny, now we are in freeze for Squeeze...

TIA





Information forwarded to debian-bugs-dist@lists.debian.org, Gerrit Pape <pape@smarden.org>:
Bug#495795; Package dropbear. (Tue, 24 Jul 2012 17:06:03 GMT) Full text and rfc822 format available.

Acknowledgement sent to Jens Rottmann <JRottmann@LiPPERTEmbedded.de>:
Extra info received and forwarded to list. Copy sent to Gerrit Pape <pape@smarden.org>. (Tue, 24 Jul 2012 17:06:03 GMT) Full text and rfc822 format available.

Message #15 received at 495795@bugs.debian.org (full text, mbox):

From: Jens Rottmann <JRottmann@LiPPERTEmbedded.de>
To: 495795@bugs.debian.org
Subject: dropbear: please provide the scp binary
Date: Tue, 24 Jul 2012 18:52:01 +0200
Seconded.

Now Wheezy is frozen.  :-(

Could scp be added to Sid at least, please?

Thanks,
Jens



Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Thu Apr 17 21:46:22 2014; Machine Name: buxtehude.debian.org

Debian Bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.