From patchwork Wed Mar 6 05:12:52 2019 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Matthias Fischer X-Patchwork-Id: 2137 Return-Path: Received: from mail01.ipfire.org (mail01.i.ipfire.org [172.28.1.200]) (using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mail01.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by web07.i.ipfire.org (Postfix) with ESMTPS id 1B93E88B508 for ; Tue, 5 Mar 2019 18:13:05 +0000 (GMT) Received: from mail01.i.ipfire.org (localhost [IPv6:::1]) by mail01.ipfire.org (Postfix) with ESMTP id 44DQ404gWKz57Jhn; Tue, 5 Mar 2019 18:13:04 +0000 (GMT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=201801; t=1551809584; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:content-type: content-transfer-encoding:in-reply-to:in-reply-to: references:references:list-id:list-unsubscribe:list-subscribe:list-post; bh=OiKikP4euPPcVzDVlaDC7/7ua/F0EwDIs+PNWfYopvQ=; b=He6calJd6JAxZKx0yWxO4VLf27aU+wHvb3hchzEJG2GS6poiWohISvb+yYmf5IOVPubaWm eNooD1VVBjR1pxrFv8wLIevJB0PyGKPYIuMU1PX7ZtcNi+lHtMNH0reTs0lq0BPFRALXJg 6mnn582YkZnqin+e8OyYdEPxwmQmz1Ob76NAZHBKjCCX7jqqzyAN8LMn7eS1Vg3yJnzB6x P3f5p8N3jWxnDCwYh3gmpDnlGi9BL00vZ+b6cjfOxKzngV7xyPwljQLMsLxnyF8wmQqjpt tjtgGR/odT2vSgT02+BtZgs+a6D1gAZKztBuZhGejCjxSuEByFL5S6uHA8Pe+Q== Received: from Devel.localdomain (p57B19780.dip0.t-ipconnect.de [87.177.151.128]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mail01.ipfire.org (Postfix) with ESMTPSA id 44DQ3s3lt0z57JhH for ; Tue, 5 Mar 2019 18:12:57 +0000 (GMT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=201801; t=1551809577; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:content-type: content-transfer-encoding:in-reply-to:in-reply-to: references:references; bh=OiKikP4euPPcVzDVlaDC7/7ua/F0EwDIs+PNWfYopvQ=; b=zVH7Q73Edr4Y4V0SORZtF6WPXlhTEzDs4iBdq4HfPEVcbWMtJujUL2hHqQ9Pu4Jfg0sUu6 c/QByEKp1JXRF7Aj9PgqBqhjgJdPQIN/OL6tWfcPqqaIjymvtGG3eVwzveirn14TIcMBUy BKt0JjNQzyM7obEGbUP4bBt7oE1gXFOaUwVEGQ3rCGMZFgMvmZUDz7/2y/B3ZFt4Adx4ee dTKtIYeuorZmN984dFTC/ITSWsHt5S7hk4/zLGK36ggSWdDp0Y8jrQW2Ehm3hLh3AV7CeA udnFSdnSElhgaHZzkfCeZTmI/fYdC1+BhAWQeHXnXqA4HJInGgM+C4uJJjwsaw== From: Matthias Fischer To: development@lists.ipfire.org Subject: [PATCH 2/2] wpa_supplicant: Update to 2.7 Date: Tue, 5 Mar 2019 19:12:52 +0100 Message-Id: <20190305181252.3487-2-matthias.fischer@ipfire.org> X-Mailer: git-send-email 2.18.0 In-Reply-To: <20190305181252.3487-1-matthias.fischer@ipfire.org> References: <20190305181252.3487-1-matthias.fischer@ipfire.org> Authentication-Results: mail01.ipfire.org; auth=pass smtp.auth=mfischer smtp.mailfrom=matthias.fischer@ipfire.org X-Spamd-Result: default: False [-9.05 / 11.00]; ARC_NA(0.00)[]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[]; REPLY(-4.00)[]; RCPT_COUNT_ONE(0.00)[1]; DKIM_SIGNED(0.00)[]; MID_CONTAINS_FROM(1.00)[]; NEURAL_HAM(-2.95)[-0.982,0]; RCVD_COUNT_ZERO(0.00)[0]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:3320, ipnet:87.128.0.0/10, country:DE]; RCVD_TLS_ALL(0.00)[]; BAYES_HAM(-3.00)[100.00%] X-Spam-Status: No, score=-9.05 X-Rspamd-Server: mail01.i.ipfire.org X-BeenThere: development@lists.ipfire.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: IPFire development talk List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: development-bounces@lists.ipfire.org Sender: "Development" For details see: https://w1.fi/cgit/hostap/plain/wpa_supplicant/ChangeLog Best, Matthias Signed-off-by: Matthias Fischer --- lfs/wpa_supplicant | 16 +++------------- 1 file changed, 3 insertions(+), 13 deletions(-) diff --git a/lfs/wpa_supplicant b/lfs/wpa_supplicant index 4d8174cbb..887ec6bd5 100644 --- a/lfs/wpa_supplicant +++ b/lfs/wpa_supplicant @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2018 IPFire Team # +# Copyright (C) 2007-2019 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 2.6 +VER = 2.7 THISAPP = wpa_supplicant-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -41,7 +41,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 091569eb4440b7d7f2b4276dbfc03c3c +$(DL_FILE)_MD5 = a68538fb62766f40f890125026c42c10 install : $(TARGET) @@ -75,16 +75,6 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE) - # Security Patches https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt - cd $(DIR_APP) && patch -p1 < $(DIR_SRC)/src/patches/wpa_supplicant/rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch - cd $(DIR_APP) && patch -p1 < $(DIR_SRC)/src/patches/wpa_supplicant/rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch - cd $(DIR_APP) && patch -p1 < $(DIR_SRC)/src/patches/wpa_supplicant/rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch - cd $(DIR_APP) && patch -p1 < $(DIR_SRC)/src/patches/wpa_supplicant/rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch - cd $(DIR_APP) && patch -p1 < $(DIR_SRC)/src/patches/wpa_supplicant/rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch - cd $(DIR_APP) && patch -p1 < $(DIR_SRC)/src/patches/wpa_supplicant/rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch - cd $(DIR_APP) && patch -p1 < $(DIR_SRC)/src/patches/wpa_supplicant/rebased-v2.6-0007-WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r.patch - cd $(DIR_APP) && patch -p1 < $(DIR_SRC)/src/patches/wpa_supplicant/rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch - cd $(DIR_APP)/wpa_supplicant && cp $(DIR_SRC)/config/wpa_supplicant/config ./.config cd $(DIR_APP)/wpa_supplicant && sed -e "s/wpa_cli\ dynamic_eap_methods/wpa_cli\ #dynamic_eap_methods/" -i Makefile cd $(DIR_APP)/wpa_supplicant && sed -e "s@/usr/local@/usr@g" -i Makefile