Timestamp:
10/17/17 17:22:36 (7 years ago)
Author:
gordon <gordon@…>
Branches:
5, 5-freebsd-12, 388d46bb1b3080402c68ae11d14b2b36c3138952, 89db1bb27c9d52164a78dc2fda0a2ba9da0920ef
Children:
9521c08
Parents:
bdc4f21
git-author:
gordon <gordon@…> (10/17/17 17:22:36)
git-committer:
Sebastian Huber <sebastian.huber@…> (11/10/17 13:13:19)
Message:

Update wpa_supplicant/hostapd for 2017-01 vulnerability release.

hostapd: Avoid key reinstallation in FT handshake
Prevent reinstallation of an already in-use group key
Extend protection of GTK/IGTK reinstallation of WNM-Sleep Mode cases
Fix TK configuration to the driver in EAPOL-Key 3/4 retry case
Prevent installation of an all-zero TK
Fix PTK rekeying to generate a new ANonce
TDLS: Reject TPK-TK reconfiguration
WNM: Ignore Key Data in WNM Sleep Mode Response frame if no PMF in use
WNM: Ignore WNM-Sleep Mode Response if WNM-Sleep Mode has not been used
WNM: Ignore WNM-Sleep Mode Response without pending request
FT: Do not allow multiple Reassociation Response frames
TDLS: Ignore incoming TDLS Setup Response retries

Submitted by: jhb
Obtained from: ​https://w1.fi/security/2017-01/ (against later version)
Security: FreeBSD-SA-17:07
Security: CERT VU#228519
Security: CVE-2017-13077
Security: CVE-2017-13078
Security: CVE-2017-13079
Security: CVE-2017-13080
Security: CVE-2017-13081
Security: CVE-2017-13082
Security: CVE-2017-13086
Security: CVE-2017-13087
Security: CVE-2017-13088
Differential Revision: ​https://reviews.freebsd.org/D12693

(No files)

Note: See TracChangeset for help on using the changeset viewer.