[Git][security-tracker-team/security-tracker][master] CVE-2019-949{4,6}: Add note on when CONFIG_SAE=y was enabled

Salvatore Bonaccorso carnil at debian.org
Wed Apr 10 20:28:12 BST 2019



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4ad58968 by Salvatore Bonaccorso at 2019-04-10T19:27:53Z
CVE-2019-949{4,6}: Add note on when CONFIG_SAE=y was enabled

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4513,6 +4513,7 @@ CVE-2019-9496 [SAE confirm missing state validation in hostapd/AP]
 	[stretch] - wpa <ignored> (SAE code not enabled for build in stretch)
 	NOTE: https://w1.fi/security/2019-3/sae-confirm-missing-state-validation.txt
 	NOTE: Patches: https://w1.fi/security/2019-3/
+	NOTE: CONFIG_SAE=y enabled since 2:2.7~git20180706+420b5dd-1
 CVE-2019-9495 [cache attack against EAP-pwd]
 	RESERVED
 	- wpa <unfixed> (bug #926801)
@@ -4524,6 +4525,7 @@ CVE-2019-9494 [cache attack against SAE]
 	[stretch] - wpa <ignored> (SAE code not enabled for build in stretch)
 	NOTE: https://w1.fi/security/2019-1/sae-side-channel-attacks.txt
 	NOTE: Patches: https://w1.fi/security/2019-1/
+	NOTE: CONFIG_SAE=y enabled since 2:2.7~git20180706+420b5dd-1
 CVE-2019-9493
 	RESERVED
 CVE-2019-9492



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/4ad58968fade0a18b15c6d44a4c3ba58b270af1f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/4ad58968fade0a18b15c6d44a4c3ba58b270af1f
You're receiving this email because of your account on salsa.debian.org.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190410/fe36b3f7/attachment-0001.html>


More information about the debian-security-tracker-commits mailing list