Hi, And apologies for the delay. Adam D. Barratt <adam@adam-barratt.org.uk> (2020-01-20): > On Mon, 2020-01-20 at 10:02 +0100, Andrej Shadura wrote: > > wpa (2:2.4-1+deb9u5) stretch; urgency=medium > > . > > * SECURITY UPDATE: > > - AP mode PMF disconnection protection bypass. > > More details: > > + https://w1.fi/security/2019-7/ > > Closes: #940080 (CVE-2019-16275) > > > > As wpa builds a udeb, this will need a d-i ack. Tagging and CCing to > that end. Trying to build the binaries to get that tested in a d-i environment, I ended up with a build failure: | x86_64-linux-gnu-gcc -Wl,-z,relro -Wl,-z,now -Wl,--as-needed -o wpa_supplicant config.o notify.o bss.o eap_register.o ../src/utils/common.o ../src/utils/wpa_debug.o ../src/utils/wpabuf.o wmm_ac.o ../src/utils/os_unix.o ../src/utils/eloop.o config_file.o ../src/rsn_supp/wpa_ft.o wnm_sta.o ../src/rsn_supp/tdls.o ../src/rsn_supp/wpa.o ../src/rsn_supp/preauth.o ../src/rsn_supp/pmksa_cache.o ../src/rsn_supp/peerkey.o ../src/rsn_supp/wpa_ie.o ../src/common/wpa_common.o ibss_rsn.o p2p_supplicant.o ../src/p2p/p2p.o ../src/p2p/p2p_utils.o ../src/p2p/p2p_parse.o ../src/p2p/p2p_build.o ../src/p2p/p2p_go_neg.o ../src/p2p/p2p_sd.o ../src/p2p/p2p_pd.o ../src/p2p/p2p_invitation.o ../src/p2p/p2p_dev_disc.o ../src/p2p/p2p_group.o ../src/ap/p2p_hostapd.o ../src/utils/bitfield.o wifi_display.o ../src/eap_peer/eap_tls.o ../src/eap_peer/eap_peap.o ../src/eap_common/eap_peap_common.o ../src/eap_peer/eap_ttls.o ../src/eap_peer/eap_md5.o ../src/eap_peer/eap_mschapv2.o ../src/eap_peer/mschapv2.o ../src/eap_peer/eap_gtc.o ../src/eap_peer/eap_otp.o ../src/eap_peer/eap_sim.o ../src/eap_peer/eap_leap.o ../src/eap_peer/eap_psk.o ../src/eap_common/eap_psk_common.o ../src/eap_peer/eap_aka.o ../src/eap_common/eap_sim_common.o ../src/eap_peer/eap_fast.o ../src/eap_peer/eap_fast_pac.o ../src/eap_common/eap_fast_common.o ../src/eap_peer/eap_pax.o ../src/eap_common/eap_pax_common.o ../src/eap_peer/eap_sake.o ../src/eap_common/eap_sake_common.o ../src/eap_peer/eap_gpsk.o ../src/eap_common/eap_gpsk_common.o ../src/eap_peer/eap_pwd.o ../src/eap_common/eap_pwd_common.o ../src/eap_peer/eap_eke.o ../src/eap_common/eap_eke_common.o wps_supplicant.o ../src/utils/uuid.o ../src/eap_peer/eap_wsc.o ../src/eap_common/eap_wsc_common.o ../src/wps/wps.o ../src/wps/wps_common.o ../src/wps/wps_attr_parse.o ../src/wps/wps_attr_build.o ../src/wps/wps_attr_process.o ../src/wps/wps_dev_attr.o ../src/wps/wps_enrollee.o ../src/wps/wps_registrar.o ../src/wps/ndef.o ../src/wps/wps_er.o ../src/wps/wps_er_ssdp.o ../src/wps/wps_upnp.o ../src/wps/wps_upnp_ssdp.o ../src/wps/wps_upnp_web.o ../src/wps/wps_upnp_event.o ../src/wps/wps_upnp_ap.o ../src/wps/upnp_xml.o ../src/wps/httpread.o ../src/wps/http_client.o ../src/wps/http_server.o ../src/eap_peer/eap_ikev2.o ../src/eap_peer/ikev2.o ../src/eap_common/eap_ikev2_common.o ../src/eap_common/ikev2_common.o ../src/eap_peer/eap_tnc.o ../src/eap_peer/tncc.o ../src/eapol_supp/eapol_supp_sm.o ../src/eap_peer/eap.o ../src/eap_peer/eap_methods.o ap.o ../src/ap/hostapd.o ../src/ap/wpa_auth_glue.o ../src/ap/utils.o ../src/ap/authsrv.o ../src/ap/ap_config.o ../src/utils/ip_addr.o ../src/ap/sta_info.o ../src/ap/tkip_countermeasures.o ../src/ap/ap_mlme.o ../src/ap/ieee802_1x.o ../src/eapol_auth/eapol_auth_sm.o ../src/ap/ieee802_11_auth.o ../src/ap/ieee802_11_shared.o ../src/ap/drv_callbacks.o ../src/ap/ap_drv_ops.o ../src/ap/beacon.o ../src/ap/bss_load.o ../src/ap/eap_user_db.o ../src/ap/ieee802_11_ht.o ../src/ap/ieee802_11_vht.o ../src/ap/wnm_ap.o ../src/ap/ctrl_iface_ap.o ../src/eap_server/eap_server.o ../src/eap_server/eap_server_identity.o ../src/eap_server/eap_server_methods.o ../src/ap/wmm.o ../src/ap/ap_list.o ../src/ap/ieee802_11.o ../src/ap/hw_features.o ../src/ap/dfs.o ../src/ap/wps_hostapd.o ../src/eap_server/eap_server_wsc.o ../src/ap/wpa_auth.o ../src/ap/wpa_auth_ie.o ../src/ap/pmksa_cache_auth.o ../src/ap/wpa_auth_ft.o ../src/ap/peerkey_auth.o ../src/utils/pcsc_funcs.o ../src/crypto/ms_funcs.o ../src/eap_common/chap.o ../src/eap_peer/eap_tls_common.o ../src/crypto/tls_openssl.o ../src/crypto/crypto_openssl.o ../src/crypto/fips_prf_openssl.o ../src/crypto/aes-eax.o ../src/crypto/aes-ctr.o ../src/crypto/aes-encblock.o ../src/crypto/aes-omac1.o ../src/crypto/aes-cbc.o ../src/crypto/sha256-prf.o ../src/crypto/dh_groups.o ../src/crypto/random.o ctrl_iface.o ctrl_iface_unix.o dbus/dbus_old.o dbus/dbus_old_handlers.o dbus/dbus_old_handlers_wps.o dbus/dbus_dict_helpers.o dbus/dbus_new_helpers.o dbus/dbus_new.o dbus/dbus_new_handlers.o dbus/dbus_new_handlers_wps.o dbus/dbus_new_handlers_p2p.o dbus/dbus_new_introspect.o dbus/dbus_common.o ../src/utils/base64.o sme.o ../src/common/ieee802_11_common.o ../src/common/hw_features_common.o ../src/eap_common/eap_common.o ../src/crypto/sha1-prf.o ../src/crypto/sha1-tprf.o ../src/crypto/sha1-tlsprf.o bgscan_simple.o bgscan.o autoscan_exponential.o autoscan_periodic.o autoscan.o ../src/common/gas.o gas_query.o offchannel.o ../src/drivers/driver_common.o wpa_supplicant.o events.o blacklist.o wpas_glue.o scan.o main.o ../src/drivers/driver_wired.o ../src/drivers/driver_nl80211.o ../src/drivers/driver_nl80211_capa.o ../src/drivers/driver_nl80211_event.o ../src/drivers/driver_nl80211_monitor.o ../src/drivers/driver_nl80211_scan.o ../src/utils/radiotap.o ../src/drivers/driver_none.o ../src/drivers/netlink.o ../src/drivers/linux_ioctl.o ../src/drivers/rfkill.o ../src/drivers/driver_wext.o ../src/drivers/drivers.o ../src/l2_packet/l2_packet_linux.o -lrt -lnl-3 -lnl-genl-3 -ldl -lpcsclite -lssl -lcrypto -ldl -ldbus-1 | ../src/ap/drv_callbacks.o: In function `hostapd_notif_assoc': | ./wpa_supplicant/../src/ap/drv_callbacks.c:66: undefined reference to `is_multicast_ether_addr' | ../src/ap/ieee802_11.o: In function `ieee802_11_mgmt': | ./wpa_supplicant/../src/ap/ieee802_11.c:2213: undefined reference to `is_multicast_ether_addr' | collect2: error: ld returned 1 exit status | Makefile:1621: recipe for target 'wpa_supplicant' failed Cheers, -- Cyril Brulebois (kibi@debian.org) <https://debamax.com/> D-I release manager -- Release team member -- Freelance Consultant
Attachment:
signature.asc
Description: PGP signature