Armbian provides its own hostapd. Why?

 

This is relevant because of the recent WPA2 bug. Upstream hostapd has been patched: https://packages.debian.org/jessie/hostapd

I don't understand the precise relation between Debian and Armbian. Will this patch percolate down?

 

Thanks

 

6 minutes ago, Hank said:

Why?

To include this patch from OpenWRT/LEDE: https://github.com/armbian/build/blob/master/packages/extras-buildpkgs/hostapd/debian/patches/300-noscan.patch

There is also a second customized version with some Realtek specific drivers("hostapd-realtek"), not sure if it's relevant only for the legacy kernel or is required on the mainline too.

 

6 minutes ago, Hank said:

Will this patch percolate down?

Yes, I'll try to find the new patches and hopefully they apply on newer sources too.

As most of boards are using wifi I wanted to confirm if KRACK vulnerability has been fixed in Armbian?

https://www.krackattacks.com/

The most important CVEs affect clients (= the wpasupplicant package) and updates for it are already available from upstream Debian and Ubuntu repositories.

For people running access point hostapd has some minor problems too. Standard package was already patched (but the repository was not updated yet as of now) and hostapd-realtek package was not patched.

Fixed in stable repository too. 

apt-update & apt-upgrade

 

Thank you very much.

 

Just so I understand this, what does the "no scan" modification do? I can just use Debian's hostapd in case what, can't I?

 

Thank you

 

"no scan" means forcing 40Mhz channel usage if adaptor support. We also support AC AP mode which is not enabled in Debian version yet ...

 

I had in mind further patching, adding more advanced/router functionalities, which you usually find in router oriented distributions. Debian is pretty generic distribution so they don't care much about this. And a special version for some Realtek chips is also an added value here.