id	summary	reporter	owner	description	type	status	priority	milestone	component	version	severity	resolution	keywords	cc
15851	Create patch for CVEs in wpa_supplicant	Douglas R. Reno	Douglas R. Reno	"See message on blfs-support titled ""wpa_supplicant security patches""

{{{
there are a few CVE patches pending for wpa_supplicant but there's no release in
sight.
This is the list of issues, not sure how serious they are, seems to affect only
Access Points and Peer to Peer (Wi-Fi Direct) uses:

* 2019-7 AP mode PMF disconnection protection bypass
* 2020-1 UPnP SUBSCRIBE misbehavior in hostapd WPS AP
* 2020-2 wpa_supplicant P2P group information processing vulnerability
* 2021-1 wpa_supplicant P2P provision discovery processing vulnerability

}}}
"	enhancement	closed	elevated	11.1	BOOK	git	medium	fixed