[OpenWrt-Devel,19.07,03/14] hostapd: Fix security problem

Message ID	20191106110514.20413-4-ynezz@true.cz
State	Changes Requested
Headers	show Return-Path: <openwrt-devel-bounces+incoming=patchwork.ozlabs.org@lists.openwrt.org> sender: petr@true.cz) by smtp-out.xnet.cz (Postfix) with ESMTPSA id F04556B27; Wed, 6 Nov 2019 12:05:23 +0100 (CET) From: =?utf-8?q?Petr_=C5=A0tetiar?= <ynezz@true.cz> To: openwrt-devel@lists.openwrt.org Date: Wed, 6 Nov 2019 12:05:08 +0100 Message-Id: <20191106110514.20413-4-ynezz@true.cz> In-Reply-To: <20191106110514.20413-1-ynezz@true.cz> References: <20191106110514.20413-1-ynezz@true.cz> MIME-Version: 1.0 summary: Content analysis details: (0.0 points) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no trust [178.217.244.18 listed in list.dnswl.org] 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record 0.0 SPF_NONE SPF: sender does not publish an SPF Record Subject: [OpenWrt-Devel] [PATCH 19.07 03/14] hostapd: Fix security problem Precedence: list Cc: Hauke Mehrtens <hauke@hauke-m.de> Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sender: "openwrt-devel" <openwrt-devel-bounces@lists.openwrt.org> Errors-To: openwrt-devel-bounces+incoming=patchwork.ozlabs.org@lists.openwrt.org
Series	bump hostap to latest stable release \| expand [OpenWrt-Devel,19.07,00/14] bump hostap to latest stable release [OpenWrt-Devel,19.07,01/14] hostapd: adjust removed wolfssl options [OpenWrt-Devel,19.07,02/14] hostapd: Allow CONFIG_IEEE80211W for all but mini variant [OpenWrt-Devel,19.07,03/14] hostapd: Fix security problem [OpenWrt-Devel,19.07,04/14] hostapd: SAE/EAP-pwd side-channel attack update [OpenWrt-Devel,19.07,05/14] hostapd: revert signature change in patch [OpenWrt-Devel,19.07,06/14] hostapd: declare struct wpa_bss early [OpenWrt-Devel,19.07,07/14] hostapd: fix OWE settings in client mode [OpenWrt-Devel,19.07,08/14] hostapd: mirror ieee80211w ap mode defaults in station mode [OpenWrt-Devel,19.07,09/14] hostapd: Update to version 2.8 (2019-04-21)

Message ID

20191106110514.20413-4-ynezz@true.cz

State

Changes Requested

Headers

From: =?utf-8?q?Petr_=C5=A0tetiar?= <ynezz@true.cz>
To: openwrt-devel@lists.openwrt.org
Date: Wed,  6 Nov 2019 12:05:08 +0100
Message-Id: <20191106110514.20413-4-ynezz@true.cz>
In-Reply-To: <20191106110514.20413-1-ynezz@true.cz>
References: <20191106110514.20413-1-ynezz@true.cz>
MIME-Version: 1.0
Subject: [OpenWrt-Devel] [PATCH 19.07 03/14] hostapd: Fix security problem
Precedence: list
Cc: Hauke Mehrtens <hauke@hauke-m.de>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
Sender: "openwrt-devel" <openwrt-devel-bounces@lists.openwrt.org>
Errors-To: openwrt-devel-bounces+incoming=patchwork.ozlabs.org@lists.openwrt.org

Series

bump hostap to latest stable release | expand

Commit Message

Petr Štetiar Nov. 6, 2019, 11:05 a.m. UTC

From: Hauke Mehrtens <hauke@hauke-m.de>

This fixes:
CVE-2019-11555 "EAP-pwd message reassembly issue with unexpected fragment"
https://w1.fi/security/2019-5/eap-pwd-message-reassembly-issue-with-unexpected-fragment.txt

This shouöld not affect OpenWrt in the default settings as we do not use
EAP-pwd.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 9f34bf51d60a237696b1d4cc9b5f4835b95e7ea2)
---
 package/network/services/hostapd/Makefile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/package/network/services/hostapd/Makefile b/package/network/services/hostapd/Makefile
index d0866f670c0b..18e4ea44906c 100644
--- a/package/network/services/hostapd/Makefile
+++ b/package/network/services/hostapd/Makefile
@@ -7,7 +7,7 @@ 
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=hostapd
-PKG_RELEASE:=7
+PKG_RELEASE:=8
 
 PKG_SOURCE_URL:=http://w1.fi/hostap.git
 PKG_SOURCE_PROTO:=git

[OpenWrt-Devel,19.07,03/14] hostapd: Fix security problem

Commit Message

Patch