package/wpa_supplicant: annotate CVE-2021-27803
authorFabrice Fontaine <fontaine.fabrice@gmail.com>
Mon, 22 Mar 2021 19:13:16 +0000 (20:13 +0100)
committerThomas Petazzoni <thomas.petazzoni@bootlin.com>
Tue, 30 Mar 2021 19:58:25 +0000 (21:58 +0200)
Add a WPA_SUPPLICANT_IGNORE_CVES entry for CVE-2021-27803 which was
fixed by commit 9ada4eb2f1c3d67ee49f6f5466738bcd821fc647, which we
have backported as
0001-P2P-Fix-a-corner-case-in-peer-addition-based-on-PD-R.patch.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
package/wpa_supplicant/wpa_supplicant.mk

index c82db43c1c7d00e281fca4d4675adf1dac949ece..96f0596bfe50eaf619549568362b0c6cdfd63014 100644 (file)
@@ -22,6 +22,9 @@ WPA_SUPPLICANT_SELINUX_MODULES = networkmanager
 # 0001-AP-Silently-ignore-management-frame-from-unexpected-.patch
 WPA_SUPPLICANT_IGNORE_CVES += CVE-2019-16275
 
+# 0001-P2P-Fix-a-corner-case-in-peer-addition-based-on-PD-R.patch
+WPA_SUPPLICANT_IGNORE_CVES += CVE-2021-27803
+
 # install the wpa_client library
 WPA_SUPPLICANT_INSTALL_STAGING = YES