From owner-freebsd-current@FreeBSD.ORG Sun Apr 26 00:29:24 2015 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 3DF7EA3E for ; Sun, 26 Apr 2015 00:29:24 +0000 (UTC) Received: from mail-ob0-f174.google.com (mail-ob0-f174.google.com [209.85.214.174]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 0A7941C40 for ; Sun, 26 Apr 2015 00:29:23 +0000 (UTC) Received: by oblw8 with SMTP id w8so61532401obl.0 for ; Sat, 25 Apr 2015 17:29:17 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=fjpC5gVuprRAjyw8/QO7UCdhWKvCTzmOnVpltIseAi0=; b=bJzhWrrBncKvZXlrr0fL6XbRRrXhgGwob9zjC1Tf+G9nyPMnH1wSjWROjHkmGrPjuB 8oqWKnFucvY5WgQvaq+x/r6Pvervtu8eI76VGcM9qzPoBAD7aRNL2KXuTT6cP3HQ2NZ1 GvMRcUmvUyTSDgBXC8cHTngh1ZDjG8u9Sr2SECOQJtkegGsGXxlO84zuKNqChcDhRAWh UENvdAuHbNN3WeA1PW2VpIgWxjgSJYHDsNpFxCjw5/09WN7rpFcYfDkrN588ufjeCfR7 q1aiciRTId3ox8bTKhsvv2mbhyhFWbTihhLf0Qlj5yl2hZecREpX+Dw34D8S4ozt/jdH sYIw== X-Gm-Message-State: ALoCoQkdignXotN2+gZwcps03lHNgjUQGb0Vrwl0Vr7L99D+vCnRmSXUDLCQgP3f51FcVmnp36Mn MIME-Version: 1.0 X-Received: by 10.202.194.135 with SMTP id s129mr4201632oif.39.1430008157028; Sat, 25 Apr 2015 17:29:17 -0700 (PDT) Received: by 10.202.80.6 with HTTP; Sat, 25 Apr 2015 17:29:16 -0700 (PDT) In-Reply-To: References: <1537009.8hcWOSdFGB@akita> Date: Sun, 26 Apr 2015 02:29:16 +0200 Message-ID: Subject: Re: CTF: wpa_supplicant/hostapd 2.4 import From: Oliver Pinter To: Rui Paulo Cc: "freebsd-wireless@freebsd.org" , FreeBSD-Current , security@freebsd.org Content-Type: text/plain; charset=UTF-8 X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 26 Apr 2015 00:29:24 -0000 On 4/26/15, Oliver Pinter wrote: > On 4/23/15, Oliver Pinter wrote: >> Rui, FYI: >> http://w1.fi/security/2015-1/wpa_supplicant-p2p-ssid-overflow.txt >> >> On Sun, Apr 19, 2015 at 9:41 PM, Rui Paulo wrote: >>> Hi, >>> >>> Please test the new wpa_supplicant/hostapd. Here's the patch against >>> FreeBSD >>> HEAD: >>> >>> https://people.freebsd.org/~rpaulo/wpa-2.4.diff >>> >>> Thanks, > > Hi Rui! > > Could you please cherry-pick / merge this commit from DragonflyBSD: > https://github.com/DragonFlyBSD/DragonFlyBSD/commit/584c4a9f0c9071cb62abe9c870a2b08afe746a88 > ? > > This fixes the CVE-2015-1863 . And this is the original commit: http://w1.fi/cgit/hostap/commit/src/p2p/p2p.c?id=9ed4eee345f85e3025c33c6e20aa25696e341ccd > >>> -- >>> Rui Paulo >>> _______________________________________________ >>> freebsd-current@freebsd.org mailing list >>> http://lists.freebsd.org/mailman/listinfo/freebsd-current >>> To unsubscribe, send any mail to >>> "freebsd-current-unsubscribe@freebsd.org" >> >