[PATCH] dropbear: disable legacy compatibility options by default

[Konstantin Demin]

Hi!

Please consider filling issue or pull request via GitHub. When you
done - tag me with "@rockdrilla".

пн, 17 авг. 2026 г. в 13:05, Zachery Aaron Shores-Chmielewski
<zacheryasc at gmail.com>:
>
> Legacy algorithms have defaulted to disabled since the Dropbear
> configuration refactor. That refactor kept DROPBEAR_LEGACY_COMPAT
> enabled temporarily and scheduled its default removal for 2026.
>
> Remove the default selection now. Legacy options stay available to
> builders who explicitly enable compatibility, and existing selections
> remain unchanged.
>
> Signed-off-by: Zachery Aaron Shores-Chmielewski <zacheryasc at gmail.com>
> ---
>  package/network/services/dropbear/Config.in | 4 +---
>  1 file changed, 1 insertion(+), 3 deletions(-)
>
> diff --git a/package/network/services/dropbear/Config.in b/package/network/services/dropbear/Config.in
> index 7e21eb83ea..3288a5ef71 100644
> --- a/package/network/services/dropbear/Config.in
> +++ b/package/network/services/dropbear/Config.in
> @@ -13,15 +13,13 @@ config DROPBEAR_STATIC_BUILD
>
>  config DROPBEAR_LEGACY_COMPAT
>         bool "Enable legacy options and features"
> -       ## TODO: remove "default y" in 2026
> -       default y
>         help
>                 Enable legacy options to be accessible.
>
>                 This enables options which are improve backward compatibility
>                 but are also known to have negative security impact.
>
> -               Default: enabled.
> +               Default: disabled.
>
>  config DROPBEAR_SMALL_CODE
>         bool "Small code"
> --
> 2.55.0
>


-- 
SY,
Konstantin Demin