linux/meta-openembedded.git/meta-oe/recipes-connectivity/hostapd, branch gatesgarth

hostapd: fix CVE-2021-30004

2021-04-18T21:23:26+00:00

In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c. References: https://nvd.nist.gov/vuln/detail/CVE-2021-30004 Upstream patches: https://w1.fi/cgit/hostap/commit/?id=a0541334a6394f8237a4393b7372693cd7e96f15 Signed-off-by: Stefan Ghinea Signed-off-by: Khem Raj (cherry picked from commit e2bd6a52bf689b77b237eaee3067d2b0b6eee3d5) Signed-off-by: Armin Kuster (cherry picked from commit 98c5cddf677addcb9aa296a7437b92100a478566) Signed-off-by: Armin Kuster

hostapd: fix CVE-2021-0326 and CVE-2021-27803

2021-04-09T01:45:33+00:00

Backport 2 patches to fix two CVEs. Signed-off-by: Mingli Yu Signed-off-by: Khem Raj (cherry picked from commit 5a085c588adaf79bb2bca7921c82d893877b28a1) Signed-off-by: Armin Kuster

hostapd: fix CVE-2019-5061

2021-04-09T01:45:29+00:00

Backport a patch to fix CVE-2019-5061. Reference: https://security-tracker.debian.org/tracker/CVE-2019-5061 Signed-off-by: Mingli Yu Signed-off-by: Khem Raj Signed-off-by: Armin Kuster

hostapd: CVE-2019-16275.patch

2020-04-21T14:14:06+00:00

security Advisory References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16275 Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj

recipes: rename distro_features_check to features_check

2019-11-22T01:51:37+00:00

Avoid warning due to the class rename in OE-Core. Signed-off-by: Denys Dmytriyenko Signed-off-by: Khem Raj

hostapd: upgrade 2.8 -> 2.9

2019-08-09T15:09:28+00:00

Signed-off-by: Yuan Chao Signed-off-by: Khem Raj

hostapd: Upgrade to 2.8

2019-04-29T17:13:56+00:00

License-Update: Copyright year updated to 2019. Remove 8 backported patches. Signed-off-by: Mingli Yu Acked-by: Philip Balister Signed-off-by: Khem Raj

hostapd: enable 802.11ac support

2018-12-06T05:16:40+00:00

hostapd has supported 802.11ac for quite a while now (and it has been used in many OpenWrt/LEDE releases) so it should be safe to enable 802.11ac support in the build. This does not automatically turn it on at runtime, but just makes it available when a config file tries to turn it on (rather than spewing syntax errors about unrecognized directives). Signed-off-by: Khem Raj

hostapd: fix CVE-2018-14526

2018-09-05T15:04:22+00:00

Ignore unauthenticated encrypted EAPOL-Key data in supplicant processing. When using WPA2, these are frames that have the Encrypted flag set, but not the MIC flag. Signed-off-by: Andrej Valek Signed-off-by: Khem Raj

hostapd: fix the bug for PATCHTOOL = "patch"

2018-05-29T19:57:23+00:00

When switch PATCHTOOL to patch, the key-replay-cve-multiple.patch can't be apply with "--dry-run" as follows: checking file src/ap/ieee802_11.c checking file src/ap/wpa_auth.c checking file src/ap/wpa_auth.h checking file src/ap/wpa_auth_ft.c checking file src/ap/wpa_auth_i.h checking file src/common/wpa_common.h checking file src/rsn_supp/wpa.c checking file src/rsn_supp/wpa_i.h checking file src/rsn_supp/wpa.c Hunk #1 FAILED at 709. Hunk #2 FAILED at 757. Hunk #3 succeeded at 840 (offset -12 lines). Hunk #4 FAILED at 868. Hunk #5 FAILED at 900. Hunk #6 FAILED at 924. Hunk #7 succeeded at 1536 (offset -38 lines). Hunk #8 FAILED at 2386. Hunk #9 FAILED at 2920. Hunk #10 succeeded at 2940 (offset -46 lines). Hunk #11 FAILED at 2998. 8 out of 11 hunks FAILED checking file src/rsn_supp/wpa_i.h Hunk #1 FAILED at 32. 1 out of 1 hunk FAILED checking file src/common/wpa_common.h Hunk #1 succeeded at 215 with fuzz 1. checking file src/rsn_supp/wpa.c checking file src/rsn_supp/wpa_i.h checking file src/ap/wpa_auth.c Hunk #1 succeeded at 1898 (offset -3 lines). Hunk #2 succeeded at 2470 (offset -3 lines). checking file src/rsn_supp/tdls.c checking file src/rsn_supp/wpa.c Hunk #1 succeeded at 2378 (offset -62 lines). checking file src/rsn_supp/wpa_ft.c checking file src/rsn_supp/wpa_i.h Hunk #1 succeeded at 123 (offset -5 lines). So split the key-replay-cve-multiple.patch to 7 patches. Signed-off-by: Zheng Ruoqin Signed-off-by: Khem Raj