<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/meta-openembedded.git/meta-oe/recipes-connectivity/hostapd, branch hardknott-next</title>
<subtitle>Mirror of git.openembedded.org/meta-openembedded</subtitle>
<id>https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=hardknott-next</id>
<link rel='self' href='https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=hardknott-next'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/'/>
<updated>2021-05-22T23:17:39+00:00</updated>
<entry>
<title>hostapd: fix building with CONFIG_TLS=internal</title>
<updated>2021-05-22T23:17:39+00:00</updated>
<author>
<name>Alexander Vickberg</name>
<email>wickbergster@gmail.com</email>
</author>
<published>2021-05-17T16:03:48+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=26c88bf3ebcade64e8fe7693da89d9c2d298d90d'/>
<id>urn:sha1:26c88bf3ebcade64e8fe7693da89d9c2d298d90d</id>
<content type='text'>
The patch recently added for CVE-2021-30004 broke compilation with
CONFIG_TLS=internal. This adds the necessary function to let it
compile again.

Signed-off-by: Alexander Vickberg &lt;wickbergster@gmail.com&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
(cherry picked from commit d6ef4170747d6668fa940328334055eef3e1e1d6)
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
</content>
</entry>
<entry>
<title>hostapd: fix CVE-2021-30004</title>
<updated>2021-04-17T13:46:24+00:00</updated>
<author>
<name>Stefan Ghinea</name>
<email>stefan.ghinea@windriver.com</email>
</author>
<published>2021-04-09T13:12:08+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=98c5cddf677addcb9aa296a7437b92100a478566'/>
<id>urn:sha1:98c5cddf677addcb9aa296a7437b92100a478566</id>
<content type='text'>
In wpa_supplicant and hostapd 2.9, forging attacks may occur because
AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and
tls/x509v3.c.

References:
https://nvd.nist.gov/vuln/detail/CVE-2021-30004

Upstream patches:
https://w1.fi/cgit/hostap/commit/?id=a0541334a6394f8237a4393b7372693cd7e96f15

Signed-off-by: Stefan Ghinea &lt;stefan.ghinea@windriver.com&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
(cherry picked from commit e2bd6a52bf689b77b237eaee3067d2b0b6eee3d5)
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
</content>
</entry>
<entry>
<title>hostapd: fix CVE-2021-0326 and CVE-2021-27803</title>
<updated>2021-04-08T20:13:29+00:00</updated>
<author>
<name>Mingli Yu</name>
<email>mingli.yu@windriver.com</email>
</author>
<published>2021-04-08T06:33:17+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=64e40a7e84623a3071ae35d8696b2cc5ac0b791c'/>
<id>urn:sha1:64e40a7e84623a3071ae35d8696b2cc5ac0b791c</id>
<content type='text'>
Backport 2 patches to fix two CVEs.

Signed-off-by: Mingli Yu &lt;mingli.yu@windriver.com&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
(cherry picked from commit 5a085c588adaf79bb2bca7921c82d893877b28a1)
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
</content>
</entry>
<entry>
<title>hostapd: fix CVE-2019-5061</title>
<updated>2021-03-22T16:25:16+00:00</updated>
<author>
<name>Mingli Yu</name>
<email>mingli.yu@windriver.com</email>
</author>
<published>2021-03-22T08:23:20+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=f422ff618009e6899d2475349ffeb57e97779cb2'/>
<id>urn:sha1:f422ff618009e6899d2475349ffeb57e97779cb2</id>
<content type='text'>
Backport a patch to fix CVE-2019-5061.

Reference: https://security-tracker.debian.org/tracker/CVE-2019-5061

Signed-off-by: Mingli Yu &lt;mingli.yu@windriver.com&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>hostapd: CVE-2019-16275.patch</title>
<updated>2020-04-21T14:14:06+00:00</updated>
<author>
<name>Wang Mingyu</name>
<email>wangmy@cn.fujitsu.com</email>
</author>
<published>2020-04-21T03:09:00+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=0acf2e26e9fbf3c28bcb209ccb2ad73e0d16b1e5'/>
<id>urn:sha1:0acf2e26e9fbf3c28bcb209ccb2ad73e0d16b1e5</id>
<content type='text'>
security Advisory

References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16275

Signed-off-by: Wang Mingyu &lt;wangmy@cn.fujitsu.com&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>recipes: rename distro_features_check to features_check</title>
<updated>2019-11-22T01:51:37+00:00</updated>
<author>
<name>Denys Dmytriyenko</name>
<email>denys@ti.com</email>
</author>
<published>2019-11-21T05:31:49+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=4c00e5fed9532fe6ee71ce96b0124fc234b44d4e'/>
<id>urn:sha1:4c00e5fed9532fe6ee71ce96b0124fc234b44d4e</id>
<content type='text'>
Avoid warning due to the class rename in OE-Core.

Signed-off-by: Denys Dmytriyenko &lt;denys@ti.com&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>hostapd: upgrade 2.8 -&gt; 2.9</title>
<updated>2019-08-09T15:09:28+00:00</updated>
<author>
<name>Yuan Chao</name>
<email>yuanc.fnst@cn.fujitsu.com</email>
</author>
<published>2019-08-09T00:57:54+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=cb036c84043af376f6b1e0a902e281ae25f908b7'/>
<id>urn:sha1:cb036c84043af376f6b1e0a902e281ae25f908b7</id>
<content type='text'>
Signed-off-by: Yuan Chao &lt;yuanc.fnst@cn.fujitsu.com&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>hostapd: Upgrade to 2.8</title>
<updated>2019-04-29T17:13:56+00:00</updated>
<author>
<name>Mingli Yu</name>
<email>mingli.yu@windriver.com</email>
</author>
<published>2019-04-23T04:33:18+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=f0a1045515860d9c681ab07f68e1c6d2bec79296'/>
<id>urn:sha1:f0a1045515860d9c681ab07f68e1c6d2bec79296</id>
<content type='text'>
License-Update: Copyright year updated to 2019.

Remove 8 backported patches.

Signed-off-by: Mingli Yu &lt;mingli.yu@windriver.com&gt;
Acked-by: Philip Balister &lt;philip@balister.org&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>hostapd: enable 802.11ac support</title>
<updated>2018-12-06T05:16:40+00:00</updated>
<author>
<name>S. Lockwood-Childs</name>
<email>sjl@vctlabs.com</email>
</author>
<published>2018-12-06T02:23:13+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=047dc65d98ebed357d314ffc24db08e9b79bb10e'/>
<id>urn:sha1:047dc65d98ebed357d314ffc24db08e9b79bb10e</id>
<content type='text'>
hostapd has supported 802.11ac for quite a while now (and it has been
used in many OpenWrt/LEDE releases) so it should be safe to enable
802.11ac support in the build. This does not automatically turn it on
at runtime, but just makes it available when a config file tries to turn
it on (rather than spewing syntax errors about unrecognized directives).

Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>hostapd: fix CVE-2018-14526</title>
<updated>2018-09-05T15:04:22+00:00</updated>
<author>
<name>Andrej Valek</name>
<email>andrej.valek@siemens.com</email>
</author>
<published>2018-09-04T15:58:54+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=ba82e1b5ec9a885ef3e554af917b8db5982e59d3'/>
<id>urn:sha1:ba82e1b5ec9a885ef3e554af917b8db5982e59d3</id>
<content type='text'>
Ignore unauthenticated encrypted EAPOL-Key data in supplicant
processing. When using WPA2, these are frames that have the Encrypted
flag set, but not the MIC flag.

Signed-off-by: Andrej Valek &lt;andrej.valek@siemens.com&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
</feed>
