]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commit
wpa-supplicant: Upgrade 2.10 -> 2.11
authorSiddharth Doshi <sdoshi@mvista.com>
Thu, 22 Aug 2024 16:17:21 +0000 (21:47 +0530)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Fri, 23 Aug 2024 21:40:38 +0000 (22:40 +0100)
commit824eb0641dc6001a5e9ad7a685e60c472c9fdce8
treeab97f68cdc741d6da8faeb657efa5f6d881d38a3
parente7bcd683365961e661c419e79a4bb641069f2a79
wpa-supplicant: Upgrade 2.10 -> 2.11

License-Update:
===============
- README: Change in copyright years as per https://w1.fi/cgit/hostap/commit/README?id=d945ddd368085f255e68328f2d3b020ceea359af
- wpa_supplicant/wpa_supplicant.c: Change in copyright years as per https://w1.fi/cgit/hostap/commit/wpa_supplicant/wpa_supplicant.c?id=d945ddd368085f255e68328f2d3b020ceea359af

CVE's Fixed:
===========
- CVE-2024-5290 wpa_supplicant: wpa_supplicant loading arbitrary shared objects allowing privilege escalation
- CVE-2023-52160 wpa_supplicant: potential authorization bypass

Changes between 2.10 -> 2.11:
============================
https://w1.fi/cgit/hostap/commit/wpa_supplicant/ChangeLog?id=d945ddd368085f255e68328f2d3b020ceea359af

Note:
=====
Patches
0001-build-Re-enable-options-for-libwpa_client.so-and-wpa.patch,
0002-Fix-removal-of-wpa_passphrase-on-make-clean.patch,
0001-Install-wpa_passphrase-when-not-disabled.patch,
0001-PEAP-client-Update-Phase-2-authentication-requiremen.patch (CVE-2023-52160)
are already fixed and hence removing them.

Signed-off-by: Siddharth Doshi <sdoshi@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-connectivity/wpa-supplicant/wpa-supplicant/0001-Install-wpa_passphrase-when-not-disabled.patch [deleted file]
meta/recipes-connectivity/wpa-supplicant/wpa-supplicant/0001-PEAP-client-Update-Phase-2-authentication-requiremen.patch [deleted file]
meta/recipes-connectivity/wpa-supplicant/wpa-supplicant/0001-build-Re-enable-options-for-libwpa_client.so-and-wpa.patch [deleted file]
meta/recipes-connectivity/wpa-supplicant/wpa-supplicant/0002-Fix-removal-of-wpa_passphrase-on-make-clean.patch [deleted file]
meta/recipes-connectivity/wpa-supplicant/wpa-supplicant_2.11.bb [moved from meta/recipes-connectivity/wpa-supplicant/wpa-supplicant_2.10.bb with 90% similarity]