[Bug 212779] [PATCH] net/hostapd: Update to 2.5
bugzilla-noreply at freebsd.org
bugzilla-noreply at freebsd.org
Sat Sep 17 22:35:02 UTC 2016
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=212779
Bug ID: 212779
Summary: [PATCH] net/hostapd: Update to 2.5
Product: Ports & Packages
Version: Latest
Hardware: Any
OS: Any
Status: New
Keywords: patch
Severity: Affects Only Me
Priority: ---
Component: Individual Port(s)
Assignee: freebsd-ports-bugs at FreeBSD.org
Reporter: leres at ee.lbl.gov
Keywords: patch
Created attachment 174892
--> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=174892&action=edit
patch
Update to 2.5. Upstream changes:
- fixed WPS UPnP vulnerability with HTTP chunked transfer encoding
[http://w1.fi/security/2015-2/] (CVE-2015-4141)
- fixed WMM Action frame parser
[http://w1.fi/security/2015-3/] (CVE-2015-4142)
- fixed EAP-pwd server missing payload length validation
[http://w1.fi/security/2015-4/]
(CVE-2015-4143, CVE-2015-4144, CVE-2015-4145)
- fixed validation of WPS and P2P NFC NDEF record payload length
[http://w1.fi/security/2015-5/]
Important: Please delete these obsolete patch files:
files/patch-src_ap_wmm.c
files/patch-src_drivers_driver__bsd.c
files/patch-src_eap__peer_eap__pwd.c
files/patch-src_eap__server_eap__server__pwd.c
files/patch-src_wps_httpread.c
--
You are receiving this mail because:
You are the assignee for the bug.
More information about the freebsd-ports-bugs
mailing list