Changeset a0209f04 for networking

Timestamp:

02/14/2024 03:42:14 AM (3 months ago)

Author:

Douglas R. Reno <renodr@…>

Branches:

12.1, ken/TL2024, lazarus, trunk, xry111/llvm18

Children:

698d5e6

Parents:

e9c2b05

Message:

Fix CVE-2023-52160 in wpa_supplicant.

File:

• networking/netprogs/wpa_supplicant.xml (modified) (2 diffs)

networking/netprogs/wpa_supplicant.xml

@@ -73 +73 @@
     </itemizedlist>
 
+    <bridgehead renderas="sect3">Additional Downloads</bridgehead>
+    <itemizedlist spacing="compact">
+      <listitem>
+        <para>
+          Required patch:
+          <ulink url="&patch-root;/wpa_supplicant-&wpa_supplicant-version;-security_fix-1.patch"/>
+        </para>
+      </listitem>
+    </itemizedlist>
+
     <bridgehead renderas="sect3">WPA Supplicant Dependencies</bridgehead>
 
@@ -166 +176 @@
 
     <para>
+      Next, patch a security vulnerability that occurs when connecting to some
+      networks:
+      <!-- CVE-2023-52160, see Ticket #19304. -->
+    </para>
+
+<screen><userinput>patch -Np1 -i ../wpa_supplicant-&wpa_supplicant-version;-security_fix-1.patch</userinput></screen>
+
+    <para>
       Install <application>WPA Supplicant</application> by running the
       following commands: