aboutsummaryrefslogtreecommitdiffstats
path: root/meta/recipes-graphics/startup-notification
diff options
context:
space:
mode:
authorRoss Burton <ross.burton@intel.com>2017-10-17 12:17:29 +0100
committerRichard Purdie <richard.purdie@linuxfoundation.org>2017-11-03 12:28:17 +0000
commit6af6e285e8bed16b02dee27c8466e9f4f9f21e30 (patch)
treec3e78b5ee74b091dc124ed34660421bb026df980 /meta/recipes-graphics/startup-notification
parenta9db40da62c13b0010ce5afc1fde16d987bdfbc6 (diff)
downloadopenembedded-core-jethro.tar.gz
wpa_supplicant: fix WPA2 key replay security bugjethro
WPA2 is vulnerable to replay attacks which result in unauthenticated users having access to the network. * CVE-2017-13077: reinstallation of the pairwise key in the Four-way handshake * CVE-2017-13078: reinstallation of the group key in the Four-way handshake * CVE-2017-13079: reinstallation of the integrity group key in the Four-way handshake * CVE-2017-13080: reinstallation of the group key in the Group Key handshake * CVE-2017-13081: reinstallation of the integrity group key in the Group Key handshake * CVE-2017-13082: accepting a retransmitted Fast BSS Transition Reassociation Request and reinstalling the pairwise key while processing it * CVE-2017-13086: reinstallation of the Tunneled Direct-Link Setup (TDLS) PeerKey (TPK) key in the TDLS handshake * CVE-2017-13087: reinstallation of the group key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame * CVE-2017-13088: reinstallation of the integrity group key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame Backport patches from upstream to resolve these CVEs. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-graphics/startup-notification')
0 files changed, 0 insertions, 0 deletions