Commit Graph

4 Commits

Author SHA1 Message Date
Mathy Vanhoef
93441c3e45 fragattacks: avoid python dependency with vulnerability
The py dependency in requirements.txt causes a security warning on
GitHub and attracts automated bug hunters (without the hunters verifying
the relevancy of the finding). Avoid this.

Flaws in py: CVE-2020-29651
Vulnerable versions: < 1.10.0
Patched version: 1.10.0
Description: A denial of service via regular expression in the py.path.svnwc
component of py (aka python-py) through 1.9.0 could be used by attackers to
cause a compute-time denial of service attack by supplying malicious input
to the blame functionality.

This fixes #40
2021-09-06 13:59:31 +02:00
Mathy Vanhoef
6f8d45f37e fragattack: improved scapy fix and driver/hostap version check 2021-01-21 01:49:12 +04:00
Mathy Vanhoef
89a1cd8283 fragattack: scapy fix with Python 3.9 2021-01-12 22:48:32 +04:00
Mathy Vanhoef
c0abf0af64 fragattack: move requirements.txt to hostapd directory 2020-05-22 21:43:35 +04:00