shield Security update for wpa_supplicant

slessp4-wpa_supplicant-12252

wpa_supplicant was updated to fix two security issues. These security issues were fixed: - CVE-2015-4142: Integer underflow in the WMM Action frame parser in hostapd and wpa_supplicant, when used for AP mode MLME/SME functionality, allowed remote attackers to cause a denial of service (crash) via a crafted frame, which triggers an out-of-bounds read (bsc#930078). - CVE-2015-4141: The WPS UPnP function in hostapd, when using WPS AP, and wpa_supplicant, when using WPS external registrar (ER), allowed remote attackers to cause a denial of service (crash) via a negative chunk length, which triggered an out-of-bounds read or heap-based buffer overflow (bsc#930077).

• Release Date
  Dec 7 2015
• References
  Bugzilla: 930078, 930077
  CVEs: CVE-2015-4142, CVE-2015-4141
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 11.4 ia64

• Packages
  wpa_supplicant
  WPA supplicant implementation

  0.7.1-6.17.4 lock rpm lock src

SUSE Linux Enterprise Server 11.4 i586

• Packages
  wpa_supplicant
  WPA supplicant implementation

  0.7.1-6.17.4 lock rpm lock src

SUSE Linux Enterprise Server for SAP All-in-One 11.4 x86_64

• Packages
  wpa_supplicant
  WPA supplicant implementation

  0.7.1-6.17.4 lock rpm lock src

SUSE Linux Enterprise Server 11.4 s390x

• Packages
  wpa_supplicant
  WPA supplicant implementation

  0.7.1-6.17.4 lock rpm lock src

SUSE Linux Enterprise Server for SAP Applications 11.4 ppc64

• Packages
  wpa_supplicant
  WPA supplicant implementation

  0.7.1-6.17.4 lock rpm lock src