Re: Dropbear SSH 2025.88 fixes CVE-2025-47203

[Albert Veli <albert.veli () gmail com>]

Thanks, this worked.

On 2025-05-13 02:47, Matt Johnston wrote:
> dbclient 'localhost,|touch 123 '
Although I have a custom CLI as login shell in /etc/passwd, but if I 
change it to /bin/sh then it works.
> > 2. Both dbclient and ssh are symlinks to the same dropbear binary.
> > Does this CVE apply equally to both, or is it specific to dbclient?
>
> It applies to both.
Thanks. That means I am vulnerable (except for the login shell part that 
complicates it).