lkundrak / rpms / hostapd

Forked from rpms/hostapd 4 years ago
Clone

aeb7fa6 Update to version 2.6 from upstream

Authored and Committed by John W. Linville 5 years ago
25 files changed. 2028 lines added. 1016 lines removed.
.gitignore
file modified
+1 -1
0001-OpenSSL-Use-constant-time-operations-for-private-big.patch
file added
+93
0002-Add-helper-functions-for-constant-time-operations.patch
file added
+218
0003-OpenSSL-Use-constant-time-selection-for-crypto_bignu.patch
file added
+60
0004-EAP-pwd-Use-constant-time-and-memory-access-for-find.patch
file added
+324
0005-SAE-Minimize-timing-differences-in-PWE-derivation.patch
file added
+241
0006-SAE-Avoid-branches-in-is_quadratic_residue_blind.patch
file added
+144
0007-SAE-Mask-timing-of-MODP-groups-22-23-24.patch
file added
+118
0008-SAE-Use-const_time-selection-for-PWE-in-FFC.patch
file added
+105
0009-SAE-Use-constant-time-operations-in-sae_test_pwd_see.patch
file added
+136
0010-SAE-Fix-confirm-message-validation-in-error-cases.patch
file added
+57
0011-EAP-pwd-server-Verify-received-scalar-and-element.patch
file added
+58
0012-EAP-pwd-server-Detect-reflection-attacks.patch
file added
+45
0013-EAP-pwd-client-Verify-received-scalar-and-element.patch
file added
+58
0014-EAP-pwd-Check-element-x-y-coordinates-explicitly.patch
file added
+331
hostapd.spec
file modified
+38 -11
nl80211-Fix-NL80211_ATTR_SMPS_MODE-encoding.patch
file removed
-38
rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch
file removed
-174
rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch
file removed
-250
rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch
file removed
-184
rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch
file removed
-79
rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch
file removed
-64
rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch
file removed
-132
rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch
file removed
-82
sources
file modified
+1 -1
    Update to version 2.6 from upstream
    Remove obsolete patches for NL80211_ATTR_SMPS_MODE encoding and KRACK
    Fix CVE-2019-9494 (cache attack against SAE)
    Fix CVE-2019-9495 (cache attack against EAP-pwd)
    Fix CVE-2019-9496 (SAE confirm missing state validation in hostapd/AP)
    Fix CVE-2019-9497 (EAP-pwd server not checking for reflection attack)
    Fix CVE-2019-9498 (EAP-pwd server missing commit validation for scalar/element)
    Fix CVE-2019-9499 (EAP-pwd peer missing commit validation for scalar/element)
    
        
file modified
+1 -1
file modified
+38 -11
file modified
+1 -1