wpa 2:2.8-2ubuntu2 source package in Ubuntu
Changelog
wpa (2:2.8-2ubuntu2) eoan; urgency=medium
* SECURITY UPDATE: SAE/EAP-pwd side-channel attack w/Brainpool curves
- debian/patches/CVE-2019-13377-1.patch: use const_time_memcmp() for
pwd_value >= prime comparison in src/common/sae.c.
- debian/patches/CVE-2019-13377-2.patch: use const_time_memcmp() for
pwd_value >= prime comparison in src/eap_common/eap_pwd_common.c.
- debian/patches/CVE-2019-13377-3.patch: use BN_bn2binpad() or
BN_bn2bin_padded() if available in src/crypto/crypto_openssl.c.
- debian/patches/CVE-2019-13377-4.patch: run through prf result
processing even if it >= prime in src/common/sae.c.
- debian/patches/CVE-2019-13377-5.patch: run through prf result
processing even if it >= prime in src/eap_common/eap_pwd_common.c.
- debian/patches/CVE-2019-13377-6.patch: disable use of groups using
Brainpool curves in src/common/sae.c,
src/eap_common/eap_pwd_common.c.
- CVE-2019-13377
-- Marc Deslauriers <email address hidden> Tue, 13 Aug 2019 13:32:28 -0400
Upload details
- Uploaded by:
- Marc Deslauriers
- Uploaded to:
- Eoan
- Original maintainer:
- Ubuntu Developers
- Architectures:
- linux-any kfreebsd-any
- Section:
- net
- Urgency:
- Medium Urgency
See full publishing history Publishing
| Series | Published | Component | Section |
|---|
Downloads
| File | Size | SHA-256 Checksum |
|---|---|---|
| wpa_2.8.orig.tar.xz | 2.2 MiB | bdce00ad67810b56bf8da73214dd298aab8a4f873d5fca167f53501209b222c2 |
| wpa_2.8-2ubuntu2.debian.tar.xz | 86.7 KiB | 7355c3b7d2efa7fb4a5906a60458884b45f4a91c45b85b7bbc583d5bf1ca79d8 |
| wpa_2.8-2ubuntu2.dsc | 2.4 KiB | 01feed84345e0d48bd318530fc5fcca7e31792f382e2b2cb88d3bc34fc6c85ed |
Available diffs
Binary packages built by this source
- hostapd: No summary available for hostapd in ubuntu eoan.
No description available for hostapd in ubuntu eoan.
- hostapd-dbgsym: No summary available for hostapd-dbgsym in ubuntu eoan.
No description available for hostapd-dbgsym in ubuntu eoan.
- wpagui: No summary available for wpagui in ubuntu eoan.
No description available for wpagui in ubuntu eoan.
- wpagui-dbgsym: No summary available for wpagui-dbgsym in ubuntu eoan.
No description available for wpagui-dbgsym in ubuntu eoan.
- wpasupplicant: No summary available for wpasupplicant in ubuntu eoan.
No description available for wpasupplicant in ubuntu eoan.
- wpasupplicant-dbgsym: No summary available for wpasupplicant-dbgsym in ubuntu eoan.
No description available for wpasupplicant-
dbgsym in ubuntu eoan.
- wpasupplicant-udeb: No summary available for wpasupplicant-udeb in ubuntu eoan.
No description available for wpasupplicant-udeb in ubuntu eoan.
