[Bug 212779] [PATCH] net/hostapd: Update to 2.5

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Sat Sep 17 22:35:02 UTC 2016


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=212779

            Bug ID: 212779
           Summary: [PATCH] net/hostapd: Update to 2.5
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Keywords: patch
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: freebsd-ports-bugs at FreeBSD.org
          Reporter: leres at ee.lbl.gov
          Keywords: patch

Created attachment 174892
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=174892&action=edit
patch

Update to 2.5. Upstream changes:

    - fixed WPS UPnP vulnerability with HTTP chunked transfer encoding
      [http://w1.fi/security/2015-2/] (CVE-2015-4141)
    - fixed WMM Action frame parser
      [http://w1.fi/security/2015-3/] (CVE-2015-4142)
    - fixed EAP-pwd server missing payload length validation
      [http://w1.fi/security/2015-4/]
      (CVE-2015-4143, CVE-2015-4144, CVE-2015-4145)
    - fixed validation of WPS and P2P NFC NDEF record payload length
      [http://w1.fi/security/2015-5/]

Important: Please delete these obsolete patch files:

    files/patch-src_ap_wmm.c
    files/patch-src_drivers_driver__bsd.c
    files/patch-src_eap__peer_eap__pwd.c
    files/patch-src_eap__server_eap__server__pwd.c
    files/patch-src_wps_httpread.c

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-ports-bugs mailing list