[Secure-testing-team] Bug#823411: wpa: CVE-2016-4476 CVE-2016-4477 / 2016-1 advisory

[Salvatore Bonaccorso]

Source: wpa
Version: 1.0-3
Severity: important
Tags: security upstream patch

Hi,

the following vulnerabilities were published for wpa.

CVE-2016-4476[0]:
|psk configuration parameter update allowing arbitrary data to be written

CVE-2016-4477[1]:
|psk configuration parameter update allowing arbitrary data to be
|written through local configuration change over the wpa_supplicant
|control interface

If you fix the vulnerabilities please also make sure to include the
CVE (Common Vulnerabilities & Exposures) ids in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2016-4476
[1] https://security-tracker.debian.org/tracker/CVE-2016-4477
[2] https://w1.fi/security/2016-1/psk-parameter-config-update.txt

Regards,
Salvatore