[pkg-wpa-devel] [wpa] 02/03: edit changelog to add patches details

Yves-Alexis Perez corsac at moszumanska.debian.org
Mon Oct 16 09:23:25 UTC 2017


This is an automated email from the git hooks/post-receive script.

corsac pushed a commit to branch debian/jessie
in repository wpa.

commit 47988e4642275ab622fd328e5003eaa70de38fac
Author: Yves-Alexis Perez <corsac at debian.org>
Date:   Sat Oct 14 14:10:52 2017 +0200

    edit changelog to add patches details
---
 debian/changelog | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/debian/changelog b/debian/changelog
index 27dd27d..fe924b2 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -3,7 +3,16 @@ wpa (2.3-1+deb8u5) UNRELEASED; urgency=high
   * Non-maintainer upload by the Security Team.
   * Add patches to fix WPA protocol vulnerabilities (CVE-2017-13077,
     CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081,
-    CVE-2017-13082, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088)
+    CVE-2017-13082, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088):
+    - hostapd: Avoid key reinstallation in FT handshake
+    - Prevent reinstallation of an already in-use group key
+    - Extend protection of GTK/IGTK reinstallation of WNM-Sleep Mode cases
+    - Fix PTK rekeying to generate a new ANonce
+    - TDLS: Reject TPK-TK reconfiguration
+    - WNM: Ignore WNM-Sleep Mode Response if WNM-Sleep Mode has not been used
+    - WNM: Ignore WNM-Sleep Mode Response without pending request
+    - FT: Do not allow multiple Reassociation Response frames
+    - TDLS: Ignore incoming TDLS Setup Response retries
 
  -- Yves-Alexis Perez <corsac at debian.org>  Sat, 14 Oct 2017 14:03:22 +0200
 

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/collab-maint/wpa.git



More information about the Pkg-wpa-devel mailing list