==========================================================================
Ubuntu Security Notice USN-3745-1
August 20, 2018

wpa vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 18.04 LTS
– Ubuntu 16.04 LTS
– Ubuntu 14.04 LTS

Summary:

wpa_supplicant and hostapd could be made to expose sensitive
information if it received a crafted message.

Software Description:
– wpa: client support for WPA and WPA2

Details:

It was discovered that wpa_supplicant and hostapd incorrectly handled
certain messages. An attacker could possibly use this to access
sensitive information.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
  hostapd                         2:2.6-15ubuntu2.1
  wpasupplicant                   2:2.6-15ubuntu2.1

Ubuntu 16.04 LTS:
  hostapd                         2.4-0ubuntu6.3
  wpasupplicant                   2.4-0ubuntu6.3

Ubuntu 14.04 LTS:
  hostapd                         2.1-0ubuntu1.6
  wpasupplicant                   2.1-0ubuntu1.6

After a standard system update you need to reboot your computer to make
all the necessary changes.

References:
  https://usn.ubuntu.com/usn/usn-3745-1
  CVE-2018-14526

Package Information:
  https://launchpad.net/ubuntu/+source/wpa/2:2.6-15ubuntu2.1
  https://launchpad.net/ubuntu/+source/wpa/2.4-0ubuntu6.3
  https://launchpad.net/ubuntu/+source/wpa/2.1-0ubuntu1.6—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2

iQIcBAABCAAGBQJbeuKVAAoJEEW851uECx9pcsoQAJbMGuJ0+l/xNSOBaH2+7KvV
lTuYiRXKBIIOT84CcwP2906FvlP3IRbI5hVtmTlIhatyG9EAYrp2aJbPx+teB/cr
Tn0Ovon99E2A4lPxKouY9fPovSqMmM2+QUnZ3z4jH00F0tmTcZkOBXe+WIWtXljt
aFW0gHee6t7SCl46vWARifkQUJlYIXyYG7WHO7yiZdaAFiYMivAV3mTfMBGx3ZKw
iHvNuOCb+cqJKBbO5D/Wa/cRiJSB1afPqLPpkYVWK+fK/TSaSCNdSbtTCeLQw9PY
W4LA4p1AF7NXicGJmc9DV1GnA9N8HMmHOzcAKQJAs0RUyo951dbsFhTmqGBfDKMw
RL9vYsPoMMrgPkpDpFlTzKohOFwQ/hUe3FJOSTN96Ry6mlS97qHMIVFk7LaPiEge
9g11HSGgGlIRTsqdKLZV9JueMYO1IhlvDBqI50Z59ZRX/TZL32wcrmaSQKlaP2lt
5vMNvs6X214m96wufPJuwnSn3t0LCjwl3sHm04qkzPUMicGgVTCS+F//2DinKVzH
exbdi4MGCH9deD0YpuOnfz7js3uuNbqY+UZpt3DN3TXEI2nTqx3XorhQWjd/YTkG
Pv5TidOTNxaBIAKRI01gfxxqVn66WyYPXsdzXBQ+ghfm+D2SJgcM2Zu9Q+NUBh6Y
Osn5dY1Vvh7yV1ymTe41
=l9uK
—–END PGP SIGNATURE—–
—