StackPatch is live — CVE patch ops for indie SaaS, $99 lifetime founder seat (50 only).See product

Back to CVE digest

Package · dropbear

`dropbear` CVE matrix across Linux distros

81 CVEs tracked across 8 distro releases. Showing the 81 most-recent fix records.

Ecosystems with tracked fixes

Alpine edgeAlpine v3.18Alpine v3.19Alpine v3.20Alpine v3.21Debian bookwormDebian bullseyeDebian trixie

Recent fix records

Each row links to the full per-CVE cross-distro view. Sorted most-recent first.

Debian bullseye

Source: Debian

CVE-2004-2486→ fixed in0.43-2
CVE-2005-4178→ fixed in0.47-1
CVE-2006-0225→ fixed in0.48-1
CVE-2006-1206→ fixed in0.48-1
CVE-2007-1099→ fixed in0.49-1
CVE-2012-0920→ fixed in2012.55-1
CVE-2013-4421→ fixed in2012.55-1.4
CVE-2013-4434→ fixed in2012.55-1.4
+14 more in Debian bullseye

Single command to patch all of these:

sudo apt-get install --only-upgrade -y dropbear

Debian bookworm

Source: Debian

CVE-2004-2486→ fixed in0.43-2
CVE-2005-4178→ fixed in0.47-1
CVE-2006-0225→ fixed in0.48-1
CVE-2006-1206→ fixed in0.48-1
CVE-2007-1099→ fixed in0.49-1
CVE-2012-0920→ fixed in2012.55-1
CVE-2013-4421→ fixed in2012.55-1.4
CVE-2013-4434→ fixed in2012.55-1.4
+14 more in Debian bookworm

Single command to patch all of these:

sudo apt-get install --only-upgrade -y dropbear

Debian trixie

Source: Debian

CVE-2004-2486→ fixed in0.43-2
CVE-2005-4178→ fixed in0.47-1
CVE-2006-0225→ fixed in0.48-1
CVE-2006-1206→ fixed in0.48-1
CVE-2007-1099→ fixed in0.49-1
CVE-2012-0920→ fixed in2012.55-1
CVE-2013-4421→ fixed in2012.55-1.4
CVE-2013-4434→ fixed in2012.55-1.4
+15 more in Debian trixie

Single command to patch all of these:

sudo apt-get install --only-upgrade -y dropbear

Alpine v3.20

Source: Alpine secdb

CVE-2018-15599→ fixed in2018.76-r2
CVE-2018-20685→ fixed in2020.79-r0
CVE-2023-48795→ fixed in2022.83-r4

Single command to patch all of these:

apk add --upgrade dropbear

Alpine v3.21

Source: Alpine secdb

CVE-2018-15599→ fixed in2018.76-r2
CVE-2018-20685→ fixed in2020.79-r0

Single command to patch all of these:

apk add --upgrade dropbear

Alpine edge

Source: Alpine secdb

CVE-2018-15599→ fixed in2018.76-r2
CVE-2018-20685→ fixed in2020.79-r0
CVE-2019-6111→ fixed in2025.89-r0
CVE-2025-14282→ fixed in2025.89-r0
CVE-2025-47203→ fixed in2025.88-r0

Single command to patch all of these:

apk add --upgrade dropbear

Alpine v3.18

Source: Alpine secdb

CVE-2018-15599→ fixed in2018.76-r2
CVE-2018-20685→ fixed in2020.79-r0

Single command to patch all of these:

apk add --upgrade dropbear

Alpine v3.19

Source: Alpine secdb

CVE-2018-15599→ fixed in2018.76-r2
CVE-2018-20685→ fixed in2020.79-r0

Single command to patch all of these:

apk add --upgrade dropbear

Is YOUR dropbear patched?

5-second check on your actual server. The quickscan reads your installed dropbear version and matches against the same 81-CVE catalog above.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan Continuous monitoring ($99 lifetime)