lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-Id: <20171025140343.21477-1-johannes@sipsolutions.net>
Date:   Wed, 25 Oct 2017 16:03:42 +0200
From:   Johannes Berg <johannes@...solutions.net>
To:     David Miller <davem@...emloft.net>
Cc:     netdev@...r.kernel.org, linux-wireless@...r.kernel.org
Subject: pull-request: mac80211 2017-10-25

Hi Dave,

Here are a few more fixes for net, we started comprehensive testing
for the security issues and found that the problem wasn't addressed
in TKIP, so that's included, along with a handful other fixes.

Please pull and let me know if there's any problem.

Thanks,
johannes



The following changes since commit 1b72bf5a0777d7cec6c2d857ac15599022b3c123:

  Merge tag 'mac80211-for-davem-2017-10-16' of git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211 (2017-10-16 21:27:16 +0100)

are available in the git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211.git tags/mac80211-for-davem-2017-10-25

for you to fetch changes up to cfbb0d90a7abb289edc91833d0905931f8805f12:

  mac80211: don't compare TKIP TX MIC key in reinstall prevention (2017-10-25 11:04:45 +0200)

----------------------------------------------------------------
Here are:
 * follow-up fixes for the WoWLAN security issue, to fix a
   partial TKIP key material problem and to use crypto_memneq()
 * a change for better enforcement of FQ's memory limit
 * a disconnect/connect handling fix, and
 * a user rate mask validation fix

----------------------------------------------------------------
Jason A. Donenfeld (1):
      mac80211: use constant time comparison with keys

Johannes Berg (3):
      cfg80211: fix connect/disconnect edge cases
      mac80211: validate user rate mask before configuring driver
      mac80211: don't compare TKIP TX MIC key in reinstall prevention

Toke Høiland-Jørgensen (1):
      fq_impl: Properly enforce memory limit

 include/net/fq_impl.h |  9 ++++++---
 net/mac80211/cfg.c    | 12 ++++++------
 net/mac80211/key.c    | 37 +++++++++++++++++++++++++++++++++++--
 net/wireless/sme.c    | 50 +++++++++++++++++++++++++++++++++++++++++---------
 4 files changed, 88 insertions(+), 20 deletions(-)

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ