logo
DATABASE RESOURCES PRICING ABOUT US

[SECURITY] [DLA 2318-1] wpa security update

Description

- ----------------------------------------------------------------------- Debian LTS Advisory DLA-2318-1 debian-lts@lists.debian.org https://www.debian.org/lts/security/ Utkarsh Gupta August 09, 2020 https://wiki.debian.org/LTS - ----------------------------------------------------------------------- Package : wpa Version : 2:2.4-1+deb9u7 CVE ID : CVE-2019-10064 CVE-2020-12695 The following CVE(s) have been reported against src:wpa. CVE-2019-10064 hostapd before 2.6, in EAP mode, makes calls to the rand() and random() standard library functions without any preceding srand() or srandom() call, which results in inappropriate use of deterministic values. This was fixed in conjunction with CVE-2016-10743. CVE-2020-12695 The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue. For Debian 9 stretch, these problems have been fixed in version 2:2.4-1+deb9u7. We recommend that you upgrade your wpa packages. For the detailed security status of wpa please refer to its security tracker page at: https://security-tracker.debian.org/tracker/wpa Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS


Affected Package


OS OS Version Package Name Package Version
Debian 10 wpagui-dbgsym 2.7+git20190128+0c1e29f-6+deb10u3
Debian 8 hostapd 2.3-1+deb8u10
Debian 10 libgupnp-1.0-4-dbgsym 1.0.5-0+deb10u1
Debian 10 wpasupplicant-udeb 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 libgupnp-1.0-dev 1.0.5-0+deb10u1
Debian 8 wpasupplicant 2.3-1+deb8u10
Debian 8 wpagui 2.3-1+deb8u10
Debian 10 wpagui-dbgsym 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 wpasupplicant-udeb 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 wpasupplicant 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 minidlna 1.2.1+dfsg-2+deb10u1
Debian 10 hostapd-dbgsym 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 minidlna 1.2.1+dfsg-2+deb10u1
Debian 10 libgupnp-1.0-4-dbgsym 1.0.5-0+deb10u1
Debian 8 wpagui 2.3-1+deb8u10
Debian 10 libgupnp-1.0-4-dbgsym 1.0.5-0+deb10u1
Debian 10 libgupnp-1.0-4 1.0.5-0+deb10u1
Debian 10 hostapd-dbgsym 2.7+git20190128+0c1e29f-6+deb10u3
Debian 9 wpagui 2.4-1+deb9u7
Debian 10 libgupnp-1.0-4 1.0.5-0+deb10u1
Debian 10 wpagui-dbgsym 2.7+git20190128+0c1e29f-6+deb10u3
Debian 9 gir1.2-gupnp-1.0 1.0.1-1+deb9u1
Debian 10 minidlna-dbgsym 1.2.1+dfsg-2+deb10u1
Debian 8 wpasupplicant 2.3-1+deb8u10
Debian 10 libgupnp-1.0-4-dbgsym 1.0.5-0+deb10u1
Debian 10 libgupnp-1.0-dev 1.0.5-0+deb10u1
Debian 9 libgupnp-1.0-4 1.0.1-1+deb9u1
Debian 10 libgupnp-1.0-4-dbgsym 1.0.5-0+deb10u1
Debian 10 libgupnp-1.0-4-dbgsym 1.0.5-0+deb10u1
Debian 8 wpagui 2.3-1+deb8u7
Debian 10 wpasupplicant-udeb 2.7+git20190128+0c1e29f-6+deb10u3
Debian 9 wpasupplicant 2.4-1+deb9u7
Debian 8 wpagui 2.3-1+deb8u10
Debian 10 wpasupplicant-udeb 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 hostapd 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 minidlna 1.2.1+dfsg-2+deb10u1
Debian 10 libgupnp-1.0-4-dbgsym 1.0.5-0+deb10u1
Debian 10 hostapd 2.7+git20190128+0c1e29f-6+deb10u3
Debian 9 hostapd 2.4-1+deb9u7
Debian 8 wpasupplicant-udeb 2.3-1+deb8u10
Debian 10 minidlna 1.2.1+dfsg-2+deb10u1
Debian 10 wpagui-dbgsym 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 hostapd-dbgsym 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 wpasupplicant-dbgsym 2.7+git20190128+0c1e29f-6+deb10u3
Debian 9 gir1.2-gupnp-1.0 1.0.1-1+deb9u1
Debian 10 gir1.2-gupnp-1.0 1.0.5-0+deb10u1
Debian 8 wpasupplicant 2.3-1+deb8u7
Debian 10 minidlna-dbgsym 1.2.1+dfsg-2+deb10u1
Debian 9 wpasupplicant 2.4-1+deb9u7
Debian 8 hostapd 2.3-1+deb8u7
Debian 10 libgupnp-1.0-4-dbgsym 1.0.5-0+deb10u1
Debian 10 libgupnp-1.0-dev 1.0.5-0+deb10u1
Debian 9 gir1.2-gupnp-1.0 1.0.1-1+deb9u1
Debian 10 libgupnp-1.0-4 1.0.5-0+deb10u1
Debian 10 libgupnp-1.0-4 1.0.5-0+deb10u1
Debian 9 hostapd 2.4-1+deb9u7
Debian 8 hostapd 2.3-1+deb8u7
Debian 8 wpasupplicant 2.3-1+deb8u7
Debian 9 wpagui 2.4-1+deb9u7
Debian 10 minidlna-dbgsym 1.2.1+dfsg-2+deb10u1
Debian 10 minidlna-dbgsym 1.2.1+dfsg-2+deb10u1
Debian 10 gir1.2-gupnp-1.0 1.0.5-0+deb10u1
Debian 10 minidlna 1.2.1+dfsg-2+deb10u1
Debian 8 hostapd 2.3-1+deb8u10
Debian 10 wpasupplicant-udeb 2.7+git20190128+0c1e29f-6+deb10u3
Debian 8 wpasupplicant-udeb 2.3-1+deb8u10
Debian 10 libgupnp-1.0-dev 1.0.5-0+deb10u1
Debian 10 gir1.2-gupnp-1.0 1.0.5-0+deb10u1
Debian 10 gir1.2-gupnp-1.0 1.0.5-0+deb10u1
Debian 9 hostapd 2.4-1+deb9u7
Debian 8 wpa 2.3-1+deb8u7
Debian 9 wpasupplicant 2.4-1+deb9u7
Debian 9 gir1.2-gupnp-1.0 1.0.1-1+deb9u1
Debian 9 wpagui 2.4-1+deb9u7
Debian 10 wpagui 2.7+git20190128+0c1e29f-6+deb10u3
Debian 8 wpagui 2.3-1+deb8u7
Debian 10 wpasupplicant 2.7+git20190128+0c1e29f-6+deb10u3
Debian 9 libgupnp-1.0-dev 1.0.1-1+deb9u1
Debian 10 libgupnp-1.0-4 1.0.5-0+deb10u1
Debian 8 wpa 2.3-1+deb8u10
Debian 10 hostapd-dbgsym 2.7+git20190128+0c1e29f-6+deb10u3
Debian 9 gir1.2-gupnp-1.0 1.0.1-1+deb9u1
Debian 10 hostapd-dbgsym 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 minidlna-dbgsym 1.2.1+dfsg-2+deb10u1
Debian 10 wpagui 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 wpasupplicant-udeb 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 hostapd 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 wpasupplicant-udeb 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 wpagui 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 wpasupplicant 2.7+git20190128+0c1e29f-6+deb10u3
Debian 8 wpagui 2.3-1+deb8u7
Debian 10 libgupnp-1.0-4 1.0.5-0+deb10u1
Debian 10 wpasupplicant-udeb 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 wpasupplicant 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 hostapd 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 minidlna-dbgsym 1.2.1+dfsg-2+deb10u1
Debian 9 minidlna 1.1.6+dfsg-1+deb9u1
Debian 10 hostapd-dbgsym 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 hostapd 2.7+git20190128+0c1e29f-6+deb10u3
Debian 9 wpagui 2.4-1+deb9u7
Debian 10 wpagui-dbgsym 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 wpagui-dbgsym 2.7+git20190128+0c1e29f-6+deb10u3
Debian 9 wpagui 2.4-1+deb9u7
Debian 10 wpasupplicant 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 wpa 2:2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 libgupnp-1.0-4 1.0.5-0+deb10u1
Debian 9 libgupnp-1.0-4 1.0.1-1+deb9u1
Debian 10 wpasupplicant-dbgsym 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 hostapd 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 wpasupplicant-dbgsym 2.7+git20190128+0c1e29f-6+deb10u3
Debian 8 wpasupplicant-udeb 2.3-1+deb8u10
Debian 10 wpagui 2.7+git20190128+0c1e29f-6+deb10u3
Debian 8 wpasupplicant-udeb 2.3-1+deb8u7
Debian 10 wpasupplicant-udeb 2.7+git20190128+0c1e29f-6+deb10u3
Debian 9 wpasupplicant-udeb 2.4-1+deb9u7
Debian 10 wpasupplicant 2.7+git20190128+0c1e29f-6+deb10u3
Debian 9 wpasupplicant-udeb 2.4-1+deb9u7
Debian 10 libgupnp-1.0-dev 1.0.5-0+deb10u1
Debian 10 libgupnp-1.0-dev 1.0.5-0+deb10u1
Debian 10 libgupnp-doc 1.0.5-0+deb10u1
Debian 10 wpasupplicant 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 wpagui 2.7+git20190128+0c1e29f-6+deb10u3
Debian 8 wpagui 2.3-1+deb8u7
Debian 10 gir1.2-gupnp-1.0 1.0.5-0+deb10u1
Debian 10 wpasupplicant 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 wpasupplicant-udeb 2.7+git20190128+0c1e29f-6+deb10u3
Debian 9 libgupnp-1.0-dev 1.0.1-1+deb9u1
Debian 10 minidlna 1.2.1+dfsg-2+deb10u1
Debian 9 minidlna 1.1.6+dfsg-1+deb9u1
Debian 10 minidlna 1.2.1+dfsg-2+deb10u1
Debian 8 wpasupplicant 2.3-1+deb8u10
Debian 9 libgupnp-doc 1.0.1-1+deb9u1
Debian 8 wpagui 2.3-1+deb8u10
Debian 10 minidlna 1.2.1+dfsg-2+deb10u1
Debian 9 gupnp 1.0.1-1+deb9u1
Debian 10 wpasupplicant-dbgsym 2.7+git20190128+0c1e29f-6+deb10u3
Debian 8 hostapd 2.3-1+deb8u10
Debian 10 libgupnp-1.0-4 1.0.5-0+deb10u1
Debian 10 wpagui-dbgsym 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 minidlna 1.2.1+dfsg-2+deb10u1
Debian 10 wpagui 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 gir1.2-gupnp-1.0 1.0.5-0+deb10u1
Debian 10 wpasupplicant-dbgsym 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 wpagui-dbgsym 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 minidlna-dbgsym 1.2.1+dfsg-2+deb10u1
Debian 10 wpagui-dbgsym 2.7+git20190128+0c1e29f-6+deb10u3
Debian 8 wpasupplicant-udeb 2.3-1+deb8u7
Debian 10 libgupnp-1.0-dev 1.0.5-0+deb10u1
Debian 10 hostapd 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 wpagui 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 wpasupplicant-dbgsym 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 minidlna-dbgsym 1.2.1+dfsg-2+deb10u1
Debian 8 wpasupplicant-udeb 2.3-1+deb8u7
Debian 9 wpasupplicant-udeb 2.4-1+deb9u7
Debian 9 libgupnp-1.0-dev 1.0.1-1+deb9u1
Debian 10 hostapd-dbgsym 2.7+git20190128+0c1e29f-6+deb10u3
Debian 9 libgupnp-1.0-4 1.0.1-1+deb9u1
Debian 10 minidlna-dbgsym 1.2.1+dfsg-2+deb10u1
Debian 10 hostapd-dbgsym 2.7+git20190128+0c1e29f-6+deb10u3
Debian 8 wpasupplicant-udeb 2.3-1+deb8u7
Debian 10 gir1.2-gupnp-1.0 1.0.5-0+deb10u1
Debian 10 hostapd 2.7+git20190128+0c1e29f-6+deb10u3
Debian 8 wpasupplicant-udeb 2.3-1+deb8u10
Debian 9 libgupnp-1.0-4 1.0.1-1+deb9u1
Debian 10 gir1.2-gupnp-1.0 1.0.5-0+deb10u1
Debian 10 minidlna 1.2.1+dfsg-2+deb10u1
Debian 10 wpasupplicant-dbgsym 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 minidlna-dbgsym 1.2.1+dfsg-2+deb10u1
Debian 8 wpasupplicant 2.3-1+deb8u7
Debian 10 libgupnp-1.0-dev 1.0.5-0+deb10u1
Debian 9 minidlna 1.1.6+dfsg-1+deb9u1
Debian 10 wpasupplicant-dbgsym 2.7+git20190128+0c1e29f-6+deb10u3
Debian 9 wpasupplicant 2.4-1+deb9u7
Debian 10 gir1.2-gupnp-1.0 1.0.5-0+deb10u1
Debian 9 wpasupplicant-udeb 2.4-1+deb9u7
Debian 10 wpasupplicant 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 libgupnp-1.0-4 1.0.5-0+deb10u1
Debian 9 wpa 2:2.4-1+deb9u7
Debian 10 hostapd-dbgsym 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 libgupnp-1.0-dev 1.0.5-0+deb10u1
Debian 10 hostapd 2.7+git20190128+0c1e29f-6+deb10u3
Debian 8 hostapd 2.3-1+deb8u7
Debian 10 hostapd-dbgsym 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 wpagui 2.7+git20190128+0c1e29f-6+deb10u3
Debian 8 wpasupplicant 2.3-1+deb8u7
Debian 9 hostapd 2.4-1+deb9u7
Debian 8 hostapd 2.3-1+deb8u7
Debian 10 wpagui 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 libgupnp-1.0-4-dbgsym 1.0.5-0+deb10u1
Debian 10 wpagui-dbgsym 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 libgupnp-1.0-dev 1.0.5-0+deb10u1
Debian 10 hostapd 2.7+git20190128+0c1e29f-6+deb10u3
Debian 9 wpasupplicant-udeb 2.4-1+deb9u7
Debian 9 libgupnp-1.0-4 1.0.1-1+deb9u1
Debian 9 libgupnp-1.0-dev 1.0.1-1+deb9u1
Debian 10 libgupnp-1.0-4 1.0.5-0+deb10u1
Debian 8 wpasupplicant 2.3-1+deb8u10
Debian 10 minidlna 1.2.1+dfsg-2+deb10u1
Debian 9 libgupnp-1.0-dev 1.0.1-1+deb9u1
Debian 10 gir1.2-gupnp-1.0 1.0.5-0+deb10u1
Debian 10 wpasupplicant 2.7+git20190128+0c1e29f-6+deb10u3
Debian 9 minidlna 1.1.6+dfsg-1+deb9u1
Debian 9 minidlna 1.1.6+dfsg-1+deb9u1
Debian 9 hostapd 2.4-1+deb9u7
Debian 10 wpasupplicant-dbgsym 2.7+git20190128+0c1e29f-6+deb10u3
Debian 9 wpasupplicant 2.4-1+deb9u7
Debian 9 minidlna 1.1.6+dfsg-1+deb9u1
Debian 10 wpasupplicant-dbgsym 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 libgupnp-1.0-4-dbgsym 1.0.5-0+deb10u1
Debian 10 wpagui 2.7+git20190128+0c1e29f-6+deb10u3
Debian 10 gupnp 1.0.5-0+deb10u1
Debian 8 hostapd 2.3-1+deb8u10

Related