<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html lang="en">
<head>
<meta content="text/html; charset=US-ASCII" http-equiv="Content-Type">
<title>
GitLab
</title>
<style>img {
max-width: 100%; height: auto;
}
</style>
</head>
<body>
<div class="content">
<h3>
Salvatore Bonaccorso pushed to branch master
at <a href="https://salsa.debian.org/security-tracker-team/security-tracker">Debian Security Tracker / security-tracker</a>
</h3>
<h4>
Commits:
</h4>
<ul>
<li>
<strong><a href="https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f1fb7807088ce8814cf9c097bb07029a371b0a54">f1fb7807</a></strong>
<div>
<span>by Salvatore Bonaccorso</span>
<i>at 2020-03-07T14:13:04+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update severity for CVE-2019-5062/wpa
Unfortunatly the Cisco Talos report is very unclear what the issue is
about. The available information is incosistent and it was not further
cleared up to upstream and does not report any accurate issue. The issue
might be disputed or rejected if someone comes up to do it so. Until
this is done demote the severity to unimportant as in any case any
possible impact is in this context negligible.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5a0a002c68b9b5269349886f67fd5e259ce6ef21">5a0a002c</a></strong>
<div>
<span>by Salvatore Bonaccorso</span>
<i>at 2020-03-07T14:15:31+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update information on CVE-2019-5061/wpa
There is not much relevant security wise impact on this issue. IAPP is
an obsolete functionality in hostapd that had been long moved to the
kernel driver years ago. So apart of doing any fixing change for this
implementation in src:wpa's end, it has just been completely dropped. As
furthermore the commit remvoing the functionality notes, IAPP
implementation was never completed.
</pre>
</li>
</ul>
<h4>1 changed file:</h4>
<ul>
<li class="file-stats">
<a href="#4716ef5aa8f2742228ba3b3633215c8b808565e3">
data/CVE/list
</a>
</li>
</ul>
<h4>Changes:</h4>
<li id="4716ef5aa8f2742228ba3b3633215c8b808565e3">
<a href="https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/d7c20452c1dbfa7355814fe7f9b4d3b72d70780a...5a0a002c68b9b5269349886f67fd5e259ce6ef21#4716ef5aa8f2742228ba3b3633215c8b808565e3"><strong>data/CVE/list</strong></a>
<hr>
No preview for this file type
<br>
</li>
</div>
<div class="footer" style="margin-top: 10px;">
<p style="font-size: small; color: #777;">
—
<br>
<a href="https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/d7c20452c1dbfa7355814fe7f9b4d3b72d70780a...5a0a002c68b9b5269349886f67fd5e259ce6ef21">View it on GitLab</a>.
<br>
You're receiving this email because of your account on salsa.debian.org.
If you'd like to receive fewer emails, you can
adjust your notification settings.
</p>
</div>
</body>
</html>