From owner-freebsd-current@FreeBSD.ORG  Sun Apr 26 00:21:15 2015
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id BCA0E8C0
 for <freebsd-current@freebsd.org>; Sun, 26 Apr 2015 00:21:15 +0000 (UTC)
Received: from mail-oi0-f48.google.com (mail-oi0-f48.google.com
 [209.85.218.48])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id 8B8571C1B
 for <freebsd-current@freebsd.org>; Sun, 26 Apr 2015 00:21:15 +0000 (UTC)
Received: by oica37 with SMTP id a37so65789768oic.0
 for <freebsd-current@freebsd.org>; Sat, 25 Apr 2015 17:21:14 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20130820;
 h=x-gm-message-state:mime-version:in-reply-to:references:date
 :message-id:subject:from:to:cc:content-type;
 bh=4LG0P+Uaw7X0FfbmW9z/U9QdmKNiJW888AQvy0xD14o=;
 b=QwQUrpz+7f/E8QS+KVyV1U9C7Bg8xJIfB27mwJYdFeXQb//n1OOxdKx+f5w8aDZk3J
 GS7YQzoXzOePvpv142vnbWvitMjbdmPbNFd8uECwTUuES9tRQKQoIWuAKG/zt3DWYYva
 PosYC+0jfqVWSx59nJ6ORZsHdRRmxPetUtVGvwy2y5B11gk02JRHpNGQiR3HABGL/+X4
 sI8inCjLMfSajaXUQkjMyuv4rEThNo1+Wb53hulLpHu36CF5nlQVha9xVxcR55dB9AdG
 4KaqP/QFC5MnRgAYoCnuDMHrgMUVatpcoRXmk0uEhJCE/JcJQzXMld9q/m3g4N3bofV3
 5EJA==
X-Gm-Message-State: ALoCoQnIXktND7GvRKRms1ICySqPqn9Os+vYCpWfthi+U9URI77tQUZES+/oeVC7RnT1m0/OhLkz
MIME-Version: 1.0
X-Received: by 10.60.101.195 with SMTP id fi3mr4336672oeb.65.1430007674333;
 Sat, 25 Apr 2015 17:21:14 -0700 (PDT)
Received: by 10.202.80.6 with HTTP; Sat, 25 Apr 2015 17:21:14 -0700 (PDT)
In-Reply-To: <CAPQ4ffuhZa3X-ra3EoPvdZ30cA5PFYuhyPP72dfdhnfSiyn1kg@mail.gmail.com>
References: <1537009.8hcWOSdFGB@akita>
 <CAPQ4ffuhZa3X-ra3EoPvdZ30cA5PFYuhyPP72dfdhnfSiyn1kg@mail.gmail.com>
Date: Sun, 26 Apr 2015 02:21:14 +0200
Message-ID: <CAPQ4ffsjyibQDGLyN7yKK2BLF8Scz_oy9QdCevpYnUQAwyfNAw@mail.gmail.com>
Subject: Re: CTF: wpa_supplicant/hostapd 2.4 import
From: Oliver Pinter <oliver.pinter@hardenedbsd.org>
To: Rui Paulo <rpaulo@me.com>
Cc: "freebsd-wireless@freebsd.org" <freebsd-wireless@freebsd.org>, 
 FreeBSD-Current <freebsd-current@freebsd.org>, security@freebsd.org
Content-Type: text/plain; charset=UTF-8
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
 <freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-current>, 
 <mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current/>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
 <mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 26 Apr 2015 00:21:15 -0000

On 4/23/15, Oliver Pinter <oliver.pinter@hardenedbsd.org> wrote:
> Rui, FYI: http://w1.fi/security/2015-1/wpa_supplicant-p2p-ssid-overflow.txt
>
> On Sun, Apr 19, 2015 at 9:41 PM, Rui Paulo <rpaulo@me.com> wrote:
>> Hi,
>>
>> Please test the new wpa_supplicant/hostapd.  Here's the patch against
>> FreeBSD
>> HEAD:
>>
>>         https://people.freebsd.org/~rpaulo/wpa-2.4.diff
>>
>> Thanks,

Hi Rui!

Could you please cherry-pick / merge this commit from DragonflyBSD:
https://github.com/DragonFlyBSD/DragonFlyBSD/commit/584c4a9f0c9071cb62abe9c870a2b08afe746a88
?

This fixes the CVE-2015-1863 .

>> --
>> Rui Paulo
>> _______________________________________________
>> freebsd-current@freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-current
>> To unsubscribe, send any mail to
>> "freebsd-current-unsubscribe@freebsd.org"
>