Changeset a0209f04

Timestamp:

02/14/2024 03:42:14 AM (4 months ago)

Author:

Douglas R. Reno <renodr@…>

Branches:

12.1, ken/TL2024, lazarus, trunk, xry111/llvm18

Children:

698d5e6

Parents:

e9c2b05

Message:

Fix CVE-2023-52160 in wpa_supplicant.

Files:

• introduction/welcome/changelog.xml (modified) (1 diff)
• networking/netprogs/wpa_supplicant.xml (modified) (2 diffs)

introduction/welcome/changelog.xml

@@ -43 +43 @@
       <para>February 13th, 2024</para>
       <itemizedlist>
+        <listitem>
+          <para>[renodr] - Fix CVE-2023-52160 in wpa_supplicant. Fixes
+          <ulink url="&blfs-ticket-root;19304">#19304</ulink>.</para>
+        </listitem>
         <listitem>
           <para>[renodr] - Update to mutter-45.4. Fixes

networking/netprogs/wpa_supplicant.xml

@@ -73 +73 @@
     </itemizedlist>
 
+    <bridgehead renderas="sect3">Additional Downloads</bridgehead>
+    <itemizedlist spacing="compact">
+      <listitem>
+        <para>
+          Required patch:
+          <ulink url="&patch-root;/wpa_supplicant-&wpa_supplicant-version;-security_fix-1.patch"/>
+        </para>
+      </listitem>
+    </itemizedlist>
+
     <bridgehead renderas="sect3">WPA Supplicant Dependencies</bridgehead>
 
@@ -166 +176 @@
 
     <para>
+      Next, patch a security vulnerability that occurs when connecting to some
+      networks:
+      <!-- CVE-2023-52160, see Ticket #19304. -->
+    </para>
+
+<screen><userinput>patch -Np1 -i ../wpa_supplicant-&wpa_supplicant-version;-security_fix-1.patch</userinput></screen>
+
+    <para>
       Install <application>WPA Supplicant</application> by running the
       following commands: