Stefan Ghinea eceb7357a6 wpa-supplicant: fix CVE-2021-0326 ...

In p2p_copy_client_info of p2p.c, there is a possible out of bounds write
due to a missing bounds check. This could lead to remote code execution
if the target device is performing a Wi-Fi Direct search, with no
additional execution privileges needed. User interaction is not needed
for exploitation.Product: AndroidVersions: Android-10 Android-11
Android-8.1 Android-9 Android ID: A-172937525

References:
https://nvd.nist.gov/vuln/detail/CVE-2021-0326

Upstream patches:
https://w1.fi/cgit/hostap/commit/?id=947272febe24a8f0ea828b5b2f35f13c3821901e<links_for_CVE_patches>

(From OE-Core rev: b7940edabe100512e8f558cc37f9da836feae74d)

Signed-off-by: Stefan Ghinea <stefan.ghinea@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2021-02-26 15:21:20 +00:00

..

classes

package/package_rpm: Disable font_provides configuration for reproducibilty

2021-02-26 15:21:20 +00:00

conf

go: Upgrade compiler to 1.16 major release

2021-02-26 15:21:20 +00:00

files

licenses: Update license file to match current SPDX names

2021-02-21 22:01:28 +00:00

lib

oe-selftests: add rpm to reproducible build selftest

2021-02-26 15:21:20 +00:00

recipes-bsp

grub: shuffle packaging for aarch64 builds

2021-02-23 22:35:01 +00:00

recipes-connectivity

wpa-supplicant: fix CVE-2021-0326

2021-02-26 15:21:20 +00:00

recipes-core

musl: Install /lib directory

2021-02-23 22:35:00 +00:00

recipes-devtools

go: Enable CGO and pie buildmode on rv64

2021-02-26 15:21:20 +00:00

recipes-extended

go-helloworld: Turn into a go module enabled build

2021-02-26 15:21:20 +00:00

recipes-gnome

json-glib: upgrade 1.6.0 -> 1.6.2

2021-02-19 11:17:11 +00:00

recipes-graphics

fonts: Bump HASHEQUIV_HASH_VERSION after rpmdeps change

2021-02-26 15:21:20 +00:00

recipes-kernel

babeltrace2: Fix reproducibility

2021-02-23 22:35:01 +00:00

recipes-multimedia

libwebp: upgrade 1.1.0 -> 1.2.0

2021-02-18 23:40:01 +00:00

recipes-rt

rt-tests/hwlatdetect: upgrade 1.9 -> 1.10

2021-01-20 22:46:18 +00:00

recipes-sato

pcmanfm: upgrade 1.3.1 -> 1.3.2

2021-02-19 11:17:11 +00:00

recipes-support

diffoscope: Ensure rpm is configured correctly

2021-02-24 12:42:49 +00:00

site

site: Make sys_siglist default to no

2020-07-22 23:47:57 +01:00

COPYING.MIT

…

recipes.txt

Remove LSB support

2019-08-29 14:05:12 +01:00