[LEDE-DEV] KRACK (Key Reinstallation Attacks), now patched upstream in hostapd

[Jim Gettys]

On Mon, Oct 16, 2017 at 6:41 AM, Stijn Tintel <stijn at linux-ipv6.be> wrote:
> On 16-10-17 13:15, Stijn Tintel wrote:
>> On 16-10-17 13:12, Koen Vandeputte wrote:
>>>
>>> On 2017-10-16 11:48, Nick Lowe wrote:
>>>> Referencing https://www.krackattacks.com/
>>>>
>>>> Patches can be found at: https://w1.fi/security/2017-1/ and an
>>>> advisory at http://seclists.org/oss-sec/2017/q4/83
>>>>
>>>> Patches can also be found committed at https://w1.fi/cgit/hostap/log/
>>>>
>>>> I think we need to get these patches integrated in to LEDE asap, or
>>>> move to the hostapd development branch where there are currently
>>>> committed.
>>> I'm currently updating my patch-in-transit to incorporate these fixes.
>>> http://patchwork.ozlabs.org/patch/823136/
>> Felix already has the patches in his staging tree [1], and we are
>> preparing the 17.01 branch for releasing 17.01.4.
>>
> Sorry, hit sent too soon and forgot to add the URL. Anyway, both master
> and the lede-17.01 branch now contain these fixes.

Outstanding response!

Will this require a upgrade of the base image, or can we just upgrade
packages?  If so,
which ones?
                                      - Jim
>
> Stijn
>
> _______________________________________________
> Lede-dev mailing list
> Lede-dev at lists.infradead.org
> http://lists.infradead.org/mailman/listinfo/lede-dev