linux/poky.git/meta/recipes-connectivity/wpa-supplicant, branch hardknott

wpa-supplicant: fix CVE-2021-30004

2021-04-30T13:37:25+00:00

In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c. References: https://nvd.nist.gov/vuln/detail/CVE-2021-30004 Upstream patches: https://w1.fi/cgit/hostap/commit/?id=a0541334a6394f8237a4393b7372693cd7e96f15 (From OE-Core rev: decf95ad84a38b86e4e9f86a78f76535f4f22d4f) Signed-off-by: Stefan Ghinea Signed-off-by: Richard Purdie (cherry picked from commit b32b671bf430b36a5547f8d822dbb760d6be47f7) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

wpa-supplicant: fix CVE-2021-27803

2021-03-06T22:39:03+00:00

A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests. It could result in denial of service or other impact (potentially execution of arbitrary code), for an attacker within radio range. References: https://nvd.nist.gov/vuln/detail/CVE-2021-27803 Upstream patches: https://w1.fi/cgit/hostap/commit/?id=8460e3230988ef2ec13ce6b69b687e941f6cdb32 (From OE-Core rev: 81e4260b83c52558c320fd7d1c1eafcb312ad6be) Signed-off-by: Stefan Ghinea Signed-off-by: Richard Purdie

meta/recipes-connectivity: Add HOMEPAGE / DESCRIPTION

2021-02-26T15:21:21+00:00

Added HOMEPAGE and DESCRIPTION for recipes with missing decriptions or homepage [YOCTO #13471] (From OE-Core rev: ecf8922e6bb12a2facc59bbe794b575101fce1dc) Signed-off-by: Dorinda Bassey Signed-off-by: Richard Purdie

wpa-supplicant: fix CVE-2021-0326

2021-02-26T15:21:20+00:00

In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9 Android ID: A-172937525 References: https://nvd.nist.gov/vuln/detail/CVE-2021-0326 Upstream patches: https://w1.fi/cgit/hostap/commit/?id=947272febe24a8f0ea828b5b2f35f13c3821901e (From OE-Core rev: b7940edabe100512e8f558cc37f9da836feae74d) Signed-off-by: Stefan Ghinea Signed-off-by: Richard Purdie

wpa-supplicant: Security fix CVE-2020-12695

2020-06-28T07:35:59+00:00

Source: http://w1.fi/security/ Disposition: Backport from http://w1.fi/security/2020-1/ Affects <= 2.9 wpa-supplicant (From OE-Core rev: e9c696397ae1b4344b8329a13076f265980ee74d) Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

wpa-supplicant: remove service templates from SYSTEMD_SERVICE

2020-06-09T12:14:01+00:00

Remove service templates wpa_supplicant-nl80211@.service and wpa_supplicant-wired@.service from SYSTEMD_SERVICE that they should NOT be started/stopped by calling 'systemctl' in postinst and prerm scripts. (From OE-Core rev: fe9b8e50461ab00ab3ad8b065ebd32f0eea2a255) Signed-off-by: Kai Kang Signed-off-by: Richard Purdie

wpa-supplicant: fix CVE-2019-16275

2019-10-31T16:09:34+00:00

(From OE-Core rev: d7b5a2ebdb6e74a21059ac2496b5dbea4597eb87) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

wpa-supplicant: Clarify BSD license variant

2019-10-15T13:16:11+00:00

The license of wpa-supplicant is BSD-3-Clause (From OE-Core rev: 95507898ad6a7b88c83ef376c1cb8b3b3a685c96) Signed-off-by: Christophe Priouzeau Signed-off-by: Richard Purdie

wpa-supplicant: update to 2.9

2019-08-12T15:23:57+00:00

(From OE-Core rev: 84f6fd6464b987c556c630e83e8888ee484dadc6) Signed-off-by: Oleksandr Kravchuk Signed-off-by: Richard Purdie

wpa-supplicant: update to 2.8

2019-05-08T22:00:32+00:00

License checksums were changed due to modified copyright years. (From OE-Core rev: d6df8c1a7766e5df6351bb56f905664394cbdcc0) Signed-off-by: Oleksandr Kravchuk Signed-off-by: Richard Purdie