Accepted wpa 2.3-1+deb8u5 (source amd64) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 14 Oct 2017 14:11:26 +0200
Source: wpa
Binary: hostapd wpagui wpasupplicant wpasupplicant-udeb
Architecture: source amd64
Version: 2.3-1+deb8u5
Distribution: jessie-security
Urgency: high
Maintainer: Debian wpasupplicant Maintainers <pkg-wpa-devel@lists.alioth.debian.org>
Changed-By: Yves-Alexis Perez <corsac@debian.org>
Description:
hostapd - IEEE 802.11 AP and IEEE 802.1X/WPA/WPA2/EAP Authenticator
wpagui - graphical user interface for wpa_supplicant
wpasupplicant - client support for WPA and WPA2 (IEEE 802.11i)
wpasupplicant-udeb - Client support for WPA and WPA2 (IEEE 802.11i) (udeb)
Changes:
wpa (2.3-1+deb8u5) jessie-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* Add patches to fix WPA protocol vulnerabilities (CVE-2017-13077,
CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081,
CVE-2017-13082, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088):
- hostapd: Avoid key reinstallation in FT handshake
- Prevent reinstallation of an already in-use group key
- Extend protection of GTK/IGTK reinstallation of WNM-Sleep Mode cases
- Fix PTK rekeying to generate a new ANonce
- TDLS: Reject TPK-TK reconfiguration
- WNM: Ignore WNM-Sleep Mode Response if WNM-Sleep Mode has not been used
- WNM: Ignore WNM-Sleep Mode Response without pending request
- FT: Do not allow multiple Reassociation Response frames
- TDLS: Ignore incoming TDLS Setup Response retries
Checksums-Sha1:
007783f3da4e796e885d5dc79c23e66037b3051d 2165 wpa_2.3-1+deb8u5.dsc
7f2e644aff9fdf766cb00e612e0ec98e3d3cb806 92112 wpa_2.3-1+deb8u5.debian.tar.xz
0359cd5396897d58f54e2e59c14835eb01774177 539710 hostapd_2.3-1+deb8u5_amd64.deb
4dbabc2817ea994853108fd324d3a47c8d25c9db 345900 wpagui_2.3-1+deb8u5_amd64.deb
c46f3889d0d91a0e5787ea3c1cf1fd99be6003aa 917858 wpasupplicant_2.3-1+deb8u5_amd64.deb
0a7e7d32abc9b0ea22ef88c45c8d2a83a8453bd1 222366 wpasupplicant-udeb_2.3-1+deb8u5_amd64.udeb
Checksums-Sha256:
866661aa6fdd5a0560a23ca9992e4d2da101db71bb7f6eeb5b9bcd988b8d18ab 2165 wpa_2.3-1+deb8u5.dsc
5b5021d7a5e023a5e4ad464de974ad60194e80d04192db96408e52cf2290baf3 92112 wpa_2.3-1+deb8u5.debian.tar.xz
b89c281f9be541322804e5005102a7ff25f2ac6052f723c7923fce840a157d11 539710 hostapd_2.3-1+deb8u5_amd64.deb
bd1590857ff6745c6e7d5cb389e3a6014843a2f198a8ef772ad8793453236804 345900 wpagui_2.3-1+deb8u5_amd64.deb
765591ddb90cb525fcda58b232208d59cb5c78b0ebe5ea476ce0de395bda695e 917858 wpasupplicant_2.3-1+deb8u5_amd64.deb
dc70f423bc86c3e8e3296024c4e4bb5c4043cc6e8763baf1bd5287f867be6e70 222366 wpasupplicant-udeb_2.3-1+deb8u5_amd64.udeb
Files:
41aa54a5181fde83a5fcb45edf018695 2165 net optional wpa_2.3-1+deb8u5.dsc
da8b95455ab7eded8ece38fdc16fe7a3 92112 net optional wpa_2.3-1+deb8u5.debian.tar.xz
f16538061681a1fdb6cc6ab5d2632d30 539710 net optional hostapd_2.3-1+deb8u5_amd64.deb
ba21904b5ab7df606ef55dc968ef1804 345900 net optional wpagui_2.3-1+deb8u5_amd64.deb
291aa57339de9104c1eb4ce7eb15ae5d 917858 net optional wpasupplicant_2.3-1+deb8u5_amd64.deb
418b3aed63b77262d3941d81a895cba8 222366 debian-installer standard wpasupplicant-udeb_2.3-1+deb8u5_amd64.udeb
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCgAdFiEEl0WwInMjgf6efq/1bdtT8qZ1wKUFAlniGrYACgkQbdtT8qZ1
wKUezAf9GprZWZmR0tw6sQT31fAN/+MfPiD5Mgf/nlTG+9oqtcVpk8Q2yCn6FFwC
HVYPzthXLTkbbV7iqdzIiLtxDf7ZAweM/76gs15IrJZ2aX2CuNfrbA9/wNk4y+Pk
x9dQwrRlmO2VYK3lDpKAnrvE65LK1jflFSvsesUVrS5IXq6B5zK/a7ujTRH70wRQ
8BhDht5RU31eo99eXLaJ3ipyGB4u+Q3C2F3gFgzhaeLourFD8Z7eJK0KuAbL4nMt
r8kmwS58q2pDpqH6BEv8RgggFIWyB4tqD/JRsflUkBEepAsD89DCMKrOmdjJxsJE
3Ct05Q5eXDLt+qjUruZK3SVbWr0Szg==
=PdIy
-----END PGP SIGNATURE-----