You are here
Home > Preporuke > Ranjivost programskog paketa wpa_supplicant

Ranjivost programskog paketa wpa_supplicant

  • Detalji os-a: FED
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LFE

——————————————————————————–
Fedora Update Notification
FEDORA-2015-1521e91178
2015-11-24 17:50:48.446167
——————————————————————————–

Name : wpa_supplicant
Product : Fedora 22
Version : 2.4
Release : 7.fc22
URL : http://w1.fi/wpa_supplicant/
Summary : WPA/WPA2/IEEE 802.1X Supplicant
Description :
wpa_supplicant is a WPA Supplicant for Linux, BSD and Windows with support
for WPA and WPA2 (IEEE 802.11i / RSN). Supplicant is the IEEE 802.1X/WPA
component that is used in the client stations. It implements key negotiation
with a WPA Authenticator and it controls the roaming and IEEE 802.11
authentication/association of the wlan driver.

——————————————————————————–
Update Information:

wpa_supplicant-2.4-7.fc22 – Make sure that network filesystems are unmounted
when shutting down (rh #1214466) – CVE-2015-4142: AP WMM: Fix integer underflow
in WMM Action frame parser (rh #1221178)
——————————————————————————–
References:

[ 1 ] Bug #1221178 – CVE-2015-4142 wpa_supplicant and hostapd: integer underflow in AP mode WMM Action frame processing
https://bugzilla.redhat.com/show_bug.cgi?id=1221178
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update wpa_supplicant’ at the command line.
For more information, refer to “Managing Software with yum”,
available at https://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

AutorTomislav Protega
Cert idNCERT-REF-2015-11-0008-ADV
CveCVE-2015-4142
ID izvornikaFEDORA-2015-1521
Proizvodwpa_supplicant
Izvorhttp://www.redhat.com
Top
More in Preporuke
Sigurnosni nedostaci programskog paketa icedtea-web

Otkriveni su sigurnosni nedostaci u programskom paketu icedtea-web. Otkriveni nedostaci potencijalnim napadačima omogućuju umetanje apleta u .appletTrustSettings konfiguracijsku datoteku, navođenje...

Close