Steve Sakoman 19d3dc1ebb wpa-supplicant: fix CVE-2022-23303-4 ...

The implementations of SAE in hostapd before 2.10 and wpa_supplicant
before 2.10 are vulnerable to side channel attacks as a result
of cache access patterns. NOTE: this issue exists because of an
incomplete fix for CVE-2019-9494.

Backport patches from:
https://w1.fi/security/2022-1/

CVE: CVE-2022-23303 CVE-2022-23304

(From OE-Core rev: 13ae7a3f4bbe7abafae3136190cf43d226271413)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2022-02-23 23:43:42 +00:00

..

wpa-supplicant

wpa-supplicant: fix CVE-2022-23303-4

2022-02-23 23:43:42 +00:00

wpa-supplicant_2.9.bb

wpa-supplicant: fix CVE-2022-23303-4

2022-02-23 23:43:42 +00:00