shield Security update for wpa_supplicant

SUSE-SLE-SERVER-12-SP1-2016-1351

This update for wpa_supplicant fixes the following issues: - CVE-2015-4141: WPS UPnP vulnerability with HTTP chunked transfer encoding. (bnc#930077) - CVE-2015-4142: Integer underflow in AP mode WMM Action frame processing. (bnc#930078) - CVE-2015-4143: EAP-pwd missing payload length validation. (bnc#930079) - CVE-2015-5310: Ignore Key Data in WNM Sleep Mode Response frame if no PMF in use. (bsc#952254) - CVE-2015-8041: Fix payload length validation in NDEF record parser. (bsc#937419)

• Release Date
  Sep 14 2016
• References
  Bugzilla: 930079, 930078, 930077, 952254, 937419
  CVEs: CVE-2015-4142, CVE-2015-4143, CVE-2015-4141, CVE-2015-5310, CVE-2015-8041
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.1 ppc64le

• Packages
  wpa_supplicant
  WPA supplicant implementation

  2.2-14.2 lock rpm lock src

SUSE Linux Enterprise Server 12.1 s390x

• Packages
  wpa_supplicant
  WPA supplicant implementation

  2.2-14.2 lock rpm lock src

SUSE Linux Enterprise Server for SAP Applications 12.1 x86_64

• Packages
  wpa_supplicant
  WPA supplicant implementation

  2.2-14.2 lock rpm lock src