Ubuntu
wpa package

wpa 2:2.6-21ubuntu3.2 source package in Ubuntu

Changelog

wpa (2:2.6-21ubuntu3.2) disco-security; urgency=medium

  * SECURITY UPDATE: SAE/EAP-pwd side-channel attack w/Brainpool curves
    - debian/patches/CVE-2019-13377-2.patch: use const_time_memcmp() for
      pwd_value >= prime comparison in src/eap_common/eap_pwd_common.c.
    - debian/patches/CVE-2019-13377-3.patch: use BN_bn2binpad() or
      BN_bn2bin_padded() if available in src/crypto/crypto_openssl.c.
    - debian/patches/CVE-2019-13377-5.patch: run through prf result
      processing even if it >= prime in src/eap_common/eap_pwd_common.c.
    - debian/patches/CVE-2019-13377-pre6.patch: disallow ECC groups with a
      prime under 256 bits in src/eap_common/eap_pwd_common.c.
    - debian/patches/CVE-2019-13377-6.patch: disable use of groups using
      Brainpool curves in src/eap_common/eap_pwd_common.c.
    - CVE-2019-13377

 -- Marc Deslauriers <email address hidden>  Tue, 13 Aug 2019 13:59:04 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Disco
Original maintainer:
Ubuntu Developers
Architectures:
linux-any kfreebsd-any
Section:
net
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
wpa_2.6.orig.tar.xz 1.9 MiB 4492629ea15c9b571ac5e41679dca6703a25b637828272a0e72f3349dd1b4eac
wpa_2.6-21ubuntu3.2.debian.tar.xz 122.8 KiB a63ad0e4af115885b12a11862aea4d87025a9566604a04b69732c7d28a93a6da
wpa_2.6-21ubuntu3.2.dsc 2.4 KiB 6e90d1a2675f03b171bf894a95bd45ba2b792063ddb768379449f0cea51053f3

View changes file

Binary packages built by this source

hostapd: No summary available for hostapd in ubuntu disco.

No description available for hostapd in ubuntu disco.

wpagui: No summary available for wpagui in ubuntu disco.

No description available for wpagui in ubuntu disco.

wpasupplicant: No summary available for wpasupplicant in ubuntu disco.

No description available for wpasupplicant in ubuntu disco.

wpasupplicant-udeb: No summary available for wpasupplicant-udeb in ubuntu disco.

No description available for wpasupplicant-udeb in ubuntu disco.