-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 17 Sep 2019 11:58:08 +0200 Source: wpa Architecture: source Version: 2:2.7+git20190128+0c1e29f-6+deb10u1 Distribution: buster-security Urgency: medium Maintainer: Debian wpasupplicant Maintainers <wpa@packages.debian.org> Changed-By: Andrej Shadura <andrewsh@debian.org> Closes: 934180 940080 Changes: wpa (2:2.7+git20190128+0c1e29f-6+deb10u1) buster-security; urgency=medium . * SECURITY UPDATE: - AP mode PMF disconnection protection bypass. More details: + https://w1.fi/security/2019-7/ Closes: #940080 (CVE-2019-16275) - Timing-based side-channel attack against WPA3's Dragonfly handshake when using Brainpool curves. More details: + https://w1.fi/security/2019-6/ + https://wpa3.mathyvanhoef.com/ Closes: #934180 (CVE-2019-13377) Checksums-Sha1: f4df702cbe046768765ca84d92d3227362e61b38 2216 wpa_2.7+git20190128+0c1e29f-6+deb10u1.dsc 63799ab5b3cbd53a690bab9f9ddda4d8ab059c83 2286436 wpa_2.7+git20190128+0c1e29f.orig.tar.xz 1c4317fe155d2d81d3d0cab8b29450ef6de03cc8 105784 wpa_2.7+git20190128+0c1e29f-6+deb10u1.debian.tar.xz Checksums-Sha256: dfa899eb6942b76578c551a61f65ec53a539349989716b72aabf7eeabe0fe379 2216 wpa_2.7+git20190128+0c1e29f-6+deb10u1.dsc 4732f6dc4f2402347a37adea7f127ffce88ae3b27afc816b67f5b51199bd139e 2286436 wpa_2.7+git20190128+0c1e29f.orig.tar.xz 7dd463a6c56dc3461f314543b8078e1d5a0c1a6313c02d6f0f8d8fe2e1f45d89 105784 wpa_2.7+git20190128+0c1e29f-6+deb10u1.debian.tar.xz Files: 1ed459936a0316445d06d39cd75d207e 2216 net optional wpa_2.7+git20190128+0c1e29f-6+deb10u1.dsc 64f7dd7528079b006de5a5883ae05abd 2286436 net optional wpa_2.7+git20190128+0c1e29f.orig.tar.xz c25318da1277624d64f96ede3f14569b 105784 net optional wpa_2.7+git20190128+0c1e29f-6+deb10u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEeuS9ZL8A0js0NGiOXkCM2RzYOdIFAl2CHSAACgkQXkCM2RzY OdLFcQf/bAFRaaLBOtHzAvaiNDdHmpcanXIa8oVcLLIzY6fWBzhLo10LKuzaawZB teiQcQdMmUHLNBTR4zxxZWXS6jVUUxGdPr6davNe35WGIWRMi7sc0nS1M4Tfr7aY tLI3zBaTy9qzQ+Is9Lkit+1eRGfy0laOEnjRBR+3mDVooGLpYheN/cP15OebA1iH TqAjFFJJJ95QgWGV5X8kL4fF3kamxA3TaFsIDzftezonhs/MhDhCHACc0rJJKRQ9 Fmpw/kWDM8fnKsg4tQG/tyNwYaDgYHHXZFbuKzpSAI6JjYJZT1Nh9G9ppFx/EUUt 2FBKgtnruQx8eqiOLIj3kDP9mMuXew== =TX+9 -----END PGP SIGNATURE-----
