[oe-commits] Otavio Salvador : wpa-supplicant: Fix CVE-2015-4142

git at git.openembedded.org git at git.openembedded.org
Tue Aug 11 16:29:07 UTC 2015


Module: openembedded-core.git
Branch: master
Commit: 2a8944b63b7249500f1b6b292ce1a87b82699f3d
URL:    http://git.openembedded.org/?p=openembedded-core.git&a=commit;h=2a8944b63b7249500f1b6b292ce1a87b82699f3d

Author: Otavio Salvador <otavio at ossystems.com.br>
Date:   Mon Aug 10 16:08:36 2015 -0300

wpa-supplicant: Fix CVE-2015-4142

The original commit "wpa-supplicant: Fix CVE-2015-4142" included the
patch file but didn't apply it into the recipe, so the backport has
not been effective.

Reported-by: Adam Moore <adam.moore at savantsystems.com>
Signed-off-by: Otavio Salvador <otavio at ossystems.com.br>
Signed-off-by: Ross Burton <ross.burton at intel.com>

---

 meta/recipes-connectivity/wpa-supplicant/wpa-supplicant_2.4.bb | 1 +
 1 file changed, 1 insertion(+)

diff --git a/meta/recipes-connectivity/wpa-supplicant/wpa-supplicant_2.4.bb b/meta/recipes-connectivity/wpa-supplicant/wpa-supplicant_2.4.bb
index 0186c2b..a124cf2 100644
--- a/meta/recipes-connectivity/wpa-supplicant/wpa-supplicant_2.4.bb
+++ b/meta/recipes-connectivity/wpa-supplicant/wpa-supplicant_2.4.bb
@@ -24,6 +24,7 @@ SRC_URI = "http://hostap.epitest.fi/releases/wpa_supplicant-${PV}.tar.gz \
            file://wpa_supplicant.conf \
            file://wpa_supplicant.conf-sane \
            file://99_wpa_supplicant \
+           file://0001-AP-WMM-Fix-integer-underflow-in-WMM-Action-frame-par.patch \
            file://0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch \
            file://0001-WPS-Fix-HTTP-chunked-transfer-encoding-parser.patch \
            file://0001-EAP-pwd-peer-Fix-payload-length-validation-for-Commi.patch \



More information about the Openembedded-commits mailing list