|
|
Subscribe / Log in / New account

Ubuntu alert USN-3745-1 (wpa)

From:  "Leonidas S. Barbosa" <leo.barbosa@canonical.com>
To:  ubuntu-security-announce@lists.ubuntu.com
Subject:  [USN-3745-1] wpa_supplicant and hostapd vulnerability
Date:  Mon, 20 Aug 2018 12:47:33 -0300
Message-ID:  <1534780053.3913.4.camel@canonical.com>

========================================================================== Ubuntu Security Notice USN-3745-1 August 20, 2018 wpa vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS Summary: wpa_supplicant and hostapd could be made to expose sensitive information if it received a crafted message. Software Description: - wpa: client support for WPA and WPA2 Details: It was discovered that wpa_supplicant and hostapd incorrectly handled certain messages. An attacker could possibly use this to access sensitive information. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS:   hostapd                         2:2.6-15ubuntu2.1   wpasupplicant                   2:2.6-15ubuntu2.1 Ubuntu 16.04 LTS:   hostapd                         2.4-0ubuntu6.3   wpasupplicant                   2.4-0ubuntu6.3 Ubuntu 14.04 LTS:   hostapd                         2.1-0ubuntu1.6   wpasupplicant                   2.1-0ubuntu1.6 After a standard system update you need to reboot your computer to make all the necessary changes. References:   https://usn.ubuntu.com/usn/usn-3745-1   CVE-2018-14526 Package Information:   https://launchpad.net/ubuntu/+source/wpa/2:2.6-15ubuntu2.1   https://launchpad.net/ubuntu/+source/wpa/2.4-0ubuntu6.3   https://launchpad.net/ubuntu/+source/wpa/2.1-0ubuntu1.6-- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security...


to post comments


Copyright © 2025, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds