Format: 1.8 Date: Tue, 13 Aug 2019 14:07:43 -0400 Source: wpa Binary: hostapd wpagui wpasupplicant wpasupplicant-udeb Architecture: ppc64el ppc64el_translations Version: 2:2.6-15ubuntu2.4 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: hostapd - IEEE 802.11 AP and IEEE 802.1X/WPA/WPA2/EAP Authenticator wpagui - graphical user interface for wpa_supplicant wpasupplicant - client support for WPA and WPA2 (IEEE 802.11i) wpasupplicant-udeb - Client support for WPA and WPA2 (IEEE 802.11i) (udeb) Changes: wpa (2:2.6-15ubuntu2.4) bionic-security; urgency=medium . * SECURITY UPDATE: SAE/EAP-pwd side-channel attack w/Brainpool curves - debian/patches/CVE-2019-13377-2.patch: use const_time_memcmp() for pwd_value >= prime comparison in src/eap_common/eap_pwd_common.c. - debian/patches/CVE-2019-13377-3.patch: use BN_bn2binpad() or BN_bn2bin_padded() if available in src/crypto/crypto_openssl.c. - debian/patches/CVE-2019-13377-5.patch: run through prf result processing even if it >= prime in src/eap_common/eap_pwd_common.c. - debian/patches/CVE-2019-13377-pre6.patch: disallow ECC groups with a prime under 256 bits in src/eap_common/eap_pwd_common.c. - debian/patches/CVE-2019-13377-6.patch: disable use of groups using Brainpool curves in src/eap_common/eap_pwd_common.c. - CVE-2019-13377 Checksums-Sha1: 397b45d611c1fe2bd9eac3a00771a898c2933844 2363080 hostapd-dbgsym_2.6-15ubuntu2.4_ppc64el.ddeb 68cd015524f6de45ef037e50f5f21ed0f559805c 573524 hostapd_2.6-15ubuntu2.4_ppc64el.deb b9d673bbffbf13eb3309bf1899f0ec196404bc7e 15189 wpa_2.6-15ubuntu2.4_ppc64el.buildinfo 45293c475815b623cefbf48331caed8df8f42381 5903 wpa_2.6-15ubuntu2.4_ppc64el_translations.tar.gz 0d38378bfccbde56facf46a48d76419888737e03 2333032 wpagui-dbgsym_2.6-15ubuntu2.4_ppc64el.ddeb f1dec9c7adade57f456f8d285886efe8e0937c5b 270860 wpagui_2.6-15ubuntu2.4_ppc64el.deb 4d59cb1ff1b8ff0bcb7fc798894ce8e413f6ab99 3942428 wpasupplicant-dbgsym_2.6-15ubuntu2.4_ppc64el.ddeb 082a4fb45387cd1d7c802a6637ccef4f3de48ee6 236072 wpasupplicant-udeb_2.6-15ubuntu2.4_ppc64el.udeb 4a6e63b97be323f2830d110b585e1d189bf00bf4 999640 wpasupplicant_2.6-15ubuntu2.4_ppc64el.deb Checksums-Sha256: 9c08bff56b6df2146e3ac0058cced22b3f4539f352af0d76482d4282e22f674c 2363080 hostapd-dbgsym_2.6-15ubuntu2.4_ppc64el.ddeb 27d7646389c732ca317a00a4761a70b26a219c2d171cae7233ef806659c79f76 573524 hostapd_2.6-15ubuntu2.4_ppc64el.deb 79ebecc96c6734975ed0b1da3b7d85dffeee4c6c030b81425f470dcb71e14237 15189 wpa_2.6-15ubuntu2.4_ppc64el.buildinfo 51ee9cdaf576e70e88d6b6637ca142a0b6ae68b6772e75a06f135c4921949d5c 5903 wpa_2.6-15ubuntu2.4_ppc64el_translations.tar.gz 90bcdee527b09c46a540c043eae83942619c0765a23dce56286a79ab3358acee 2333032 wpagui-dbgsym_2.6-15ubuntu2.4_ppc64el.ddeb ef86e1f5685069bd984f6c846541a2e1557083d6011e4134a5b9dce3b04a9fe1 270860 wpagui_2.6-15ubuntu2.4_ppc64el.deb 2ee02abf2f344bd6b7fb30e2aec698ab753398583e14ba56ecd009d85799d746 3942428 wpasupplicant-dbgsym_2.6-15ubuntu2.4_ppc64el.ddeb 5f096176fed5077c8d0369dc181820ba8f260efcaf1704915a25b13477dd6ebe 236072 wpasupplicant-udeb_2.6-15ubuntu2.4_ppc64el.udeb ea199a6b35dcd81709fa77310d6d7910fa6ddf1b6df41308213e64c2c8aa65f0 999640 wpasupplicant_2.6-15ubuntu2.4_ppc64el.deb Files: e114e54c2aff56afe4f27a441b09eaa9 2363080 debug optional hostapd-dbgsym_2.6-15ubuntu2.4_ppc64el.ddeb 8efeda5cd6d277305cb9b9d7e4fe597c 573524 net optional hostapd_2.6-15ubuntu2.4_ppc64el.deb 280afadf9dd426098340f68fc5655ce1 15189 net optional wpa_2.6-15ubuntu2.4_ppc64el.buildinfo 4dcf098031f26b63804c34bc66d64984 5903 raw-translations - wpa_2.6-15ubuntu2.4_ppc64el_translations.tar.gz 2f161c3cd51f72330c96f055d219456a 2333032 debug optional wpagui-dbgsym_2.6-15ubuntu2.4_ppc64el.ddeb 1ac30f51fe5466470163f39f637aafe5 270860 net optional wpagui_2.6-15ubuntu2.4_ppc64el.deb ef08ef5d949750c6fd3691e65531748f 3942428 debug optional wpasupplicant-dbgsym_2.6-15ubuntu2.4_ppc64el.ddeb 77e0bdd3aa2f68986e1d8acd11e89ad7 236072 debian-installer standard wpasupplicant-udeb_2.6-15ubuntu2.4_ppc64el.udeb 2c1a4e341a22df023859c90b86e66f43 999640 net optional wpasupplicant_2.6-15ubuntu2.4_ppc64el.deb Original-Maintainer: Debian wpasupplicant Maintainers