[Git][security-tracker-team/security-tracker][master] Add CVE-2016-10743/wpa

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2cecc093 by Salvatore Bonaccorso at 2019-03-24T08:08:34Z
Add CVE-2016-10743/wpa

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -25,7 +25,10 @@ CVE-2019-9944
 CVE-2019-9943
 	RESERVED
 CVE-2016-10743 (hostapd before 2.6 does not prevent use of the low-quality PRNG that i ...)
-	TODO: check
+	- wpa 2:2.6-7
+	NOTE: https://w1.fi/cgit/hostap/commit/?id=98a516eae8260e6fd5c48ddecf8d006285da7389
+	NOTE: There was already a 2.6 upload late in 2016 but then reverted to a 2.4 based
+	NOTE: version and only reuploaded as 2:2.6-7 to unstable.
 CVE-2019-9942 (A sandbox information disclosure exists in Twig before 1.38.0 and 2.x  ...)
 	[experimental] - twig 2.7.1-1
 	- twig 2.6.2-2



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/2cecc0933d0a7909fa95c64989e145819a3312ff

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/2cecc0933d0a7909fa95c64989e145819a3312ff
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190324/87d4f548/attachment.html>