Stabilization for over the air exploitable problems
in the WLAN stack
See:
https://lwn.net/ml/oss-security/20221013101046.GB20615@suse.de/
CVE-2022-41674: fix u8 overflow in cfg80211_update_notlisted_nontrans
(max 256 byte overwrite) (RCE)
CVE-2022-42719: wifi: mac80211: fix MBSSID parsing use-after-free
use after free condition (RCE)
CVE-2022-42720: wifi: cfg80211: fix BSS refcounting bugs
ref counting use-after-free possibilities (RCE)
CVE-2022-42721: wifi: cfg80211: avoid nontransmitted BSS list corruption
list corruption, according to Johannes will however just make it
endless loop (DOS)
CVE-2022-42722: wifi: mac80211: fix crash in beacon protection for
P2P-device NULL ptr dereference crash (DOS)
Signed-off-by: Mike Pagano <mpagano@gentoo.org>
Stabilization for over the air exploitable problems
in the WLAN stack
See:
https://lwn.net/ml/oss-security/20221013101046.GB20615@suse.de/
CVE-2022-41674: fix u8 overflow in cfg80211_update_notlisted_nontrans
(max 256 byte overwrite) (RCE)
CVE-2022-42719: wifi: mac80211: fix MBSSID parsing use-after-free
use after free condition (RCE)
CVE-2022-42720: wifi: cfg80211: fix BSS refcounting bugs
ref counting use-after-free possibilities (RCE)
CVE-2022-42721: wifi: cfg80211: avoid nontransmitted BSS list corruption
list corruption, according to Johannes will however just make it
endless loop (DOS)
CVE-2022-42722: wifi: mac80211: fix crash in beacon protection for
P2P-device NULL ptr dereference crash (DOS)
Signed-off-by: Mike Pagano <mpagano@gentoo.org>
Stabilization for over the air exploitable problems
in the WLAN stack
See:
https://lwn.net/ml/oss-security/20221013101046.GB20615@suse.de/
CVE-2022-41674: fix u8 overflow in cfg80211_update_notlisted_nontrans
(max 256 byte overwrite) (RCE)
CVE-2022-42719: wifi: mac80211: fix MBSSID parsing use-after-free
use after free condition (RCE)
CVE-2022-42720: wifi: cfg80211: fix BSS refcounting bugs
ref counting use-after-free possibilities (RCE)
CVE-2022-42721: wifi: cfg80211: avoid nontransmitted BSS list corruption
list corruption, according to Johannes will however just make it
endless loop (DOS)
CVE-2022-42722: wifi: mac80211: fix crash in beacon protection for
P2P-device NULL ptr dereference crash (DOS)
Signed-off-by: Mike Pagano <mpagano@gentoo.org>
Stabilization for over the air exploitable problems
in the WLAN stack
See:
https://lwn.net/ml/oss-security/20221013101046.GB20615@suse.de/
CVE-2022-41674: fix u8 overflow in cfg80211_update_notlisted_nontrans
(max 256 byte overwrite) (RCE)
CVE-2022-42719: wifi: mac80211: fix MBSSID parsing use-after-free
use after free condition (RCE)
CVE-2022-42720: wifi: cfg80211: fix BSS refcounting bugs
ref counting use-after-free possibilities (RCE)
CVE-2022-42721: wifi: cfg80211: avoid nontransmitted BSS list corruption
list corruption, according to Johannes will however just make it
endless loop (DOS)
CVE-2022-42722: wifi: mac80211: fix crash in beacon protection for
P2P-device NULL ptr dereference crash (DOS)
Signed-off-by: Mike Pagano <mpagano@gentoo.org>
Release fixed issues with clang16 3 years ago wrt #874435
Also:
* GPL-2 -> BSD-2 (no GPL in here)
* pass ncurses' --cflags too
* install the newly added .desktop+icon
* small fixes for c2x so won't need -std=gnu89
Closes: https://bugs.gentoo.org/874435
Signed-off-by: Ionen Wolkens <ionen@gentoo.org>
wrt runtime, lacked $(get_libdir):
ld.so: object '/usr/lib/libnoexec.so' from LD_PRELOAD
cannot be preloaded
(no bug, assume nobody actually use this)
Don't think the glibc dependency makes sense, but given LD_PRELOAD
tricks I would rather leave alone without inspecting and trying musl.
Also GPL-2 -> GPL-2+, put glibc in RDEPEND too fwiw, and remove .la.
Closes: https://bugs.gentoo.org/851816
Closes: https://bugs.gentoo.org/874426
Signed-off-by: Ionen Wolkens <ionen@gentoo.org>
Michał Górny
William Hubbs
Mike Pagano
Ionen Wolkens