Viewing all changes in revision 15.
- Committer: Package Import Robot
- Date: 2014-10-10 09:15:39 UTC
- Revision ID: package-import@ubuntu.com-20141010091539-ieug36j0o0trwysg
* SECURITY UPDATE: arbitrary command execution via unsanitized string
passed to action scripts by wpa_cli and hostapd_cli
- debian/patches/CVE-2014-3686.patch: added os_exec() helper to
src/utils/os.h, src/utils/os_unix.c, src/utils/os_win32.c,
use instead of system() in wpa_supplicant/wpa_cli.c,
hostapd/hostapd_cli.c.
- CVE-2014-3686
passed to action scripts by wpa_cli and hostapd_cli
- debian/patches/CVE-2014-3686.patch: added os_exec() helper to
src/utils/os.h, src/utils/os_unix.c, src/utils/os_win32.c,
use instead of system() in wpa_supplicant/wpa_cli.c,
hostapd/hostapd_cli.c.
- CVE-2014-3686
- files added:
- .pc/CVE-2014-3686.patch
- .pc/CVE-2014-3686.patch/hostapd
- .pc/CVE-2014-3686.patch/src
- .pc/CVE-2014-3686.patch/src/utils
- .pc/CVE-2014-3686.patch/wpa_supplicant
- files modified:
- .pc/applied-patches
expand all
collapse all
added
removed
