shield Security update for wpa_supplicant

SUSE-SLE-SERVER-12-2019-1088

This update for wpa_supplicant fixes the following issues: This security issue was fixed: - CVE-2018-14526: Under certain conditions, the integrity of EAPOL-Key messages was not checked, leading to a decryption oracle. An attacker within range of the Access Point and client could have abused the vulnerability to recover sensitive information (bsc#1104205). This non-security issue was fixed: - Enabled PWD as EAP method. This allows for password-based authentication, which is easier to setup than most of the other methods, and is used by the Eduroam network (bsc#1109209).

• Release Date
  Apr 29 2019
• References
  Bugzilla: 1104205, 1109209
  CVEs: CVE-2018-14526
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server LTSS 12 s390x

• Packages
  wpa_supplicant
  WPA supplicant implementation

  2.6-15.10.1 lock rpm lock src

SUSE Linux Enterprise Server LTSS 12 x86_64

• Packages
  wpa_supplicant
  WPA supplicant implementation

  2.6-15.10.1 lock rpm lock src