[Git][security-tracker-team/security-tracker][master] Update information on CVE-2019-10064/wpa

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9376f69d by Salvatore Bonaccorso at 2020-02-28T20:49:43+01:00
Update information on CVE-2019-10064/wpa

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -50521,9 +50521,13 @@ CVE-2019-10065
 	RESERVED
 CVE-2019-10064
 	RESERVED
-	- wpa <unfixed>
+	- wpa 2:2.6-7
 	NOTE: https://www.openwall.com/lists/oss-security/2020/02/27/1
 	NOTE: Comment from upstream: https://www.openwall.com/lists/oss-security/2020/02/27/2
+	NOTE: Issue fixed in conjunction with CVE-2016-10743.
+	NOTE: https://w1.fi/cgit/hostap/commit/?id=4b16c15bbc8b20a85bb3d6f45bba5621a047618e
+	NOTE: There was already a 2.6 upload late in 2016 but then reverted to a 2.4 based
+	NOTE: version and only reuploaded as 2:2.6-7 to unstable.
 CVE-2019-10063 (Flatpak before 1.0.8, 1.1.x and 1.2.x before 1.2.4, and 1.3.x before 1 ...)
 	- flatpak 1.2.3-2 (bug #925541)
 	[stretch] - flatpak 0.8.9-0+deb9u3



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9376f69d01b884194e44b239aeb45ba1f8ef9a0f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9376f69d01b884194e44b239aeb45ba1f8ef9a0f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200228/d13921b8/attachment.html>