[SECURITY] Fedora 34 Update: linuxptp-3.1.1-1.fc34

This software is an implementation of the Precision Time Protocol PTP according to IEEE standard 1588 for Linux. The dual design goals are to provi de a robust implementation of the standard and to use the most relevant and mode rn Application Programming Interfaces API offered by the Linux kerne...

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: I’m speaking at Norbert Wiener in the 21st Century, a virtual conference hosted by The IEEE Society on Social Implications of Technology SSIT, July 23-25, 2021. I’m speaking at DEFCON 29, August 5-8, 2021. Im speaking via Internet ...

Important: Red Hat Security Advisory: linuxptp security update

An update for linuxptp is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Important: Red Hat Security Advisory: linuxptp security update

An update for linuxptp is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

linuxptp security update

An update is available for linuxptp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The linuxptp packages provide Precision Time Protocol PTP implementation for...

Important: linuxptp security update

The linuxptp packages provide Precision Time Protocol PTP implementation for Linux according to IEEE standard 1588 for Linux. The dual design goals are to provide a robust implementation of the standard and to use the most relevant and modern Application Programming Interfaces API offered by the...

Debian: Security Advisory (DLA-2703-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-2703-1 ieee-data - crash fix

Bulletin has no description...

[SECURITY] [BUGFIX] [DLA 2703-1] ieee-data crash fix

----------------------------------------------------------------------- Debian LTS Advisory DLA-2703-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta July 04, 2021 https://wiki.debian.org/LTS - -----------------------------------------------------------------------...

Debian DLA-2703-1 : ieee-data - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2703 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 70300 C Tenable Network Security...

UVI-2021-1001046 net: ieee802154: fix null deref in parse dev addr

net: ieee802154: fix null deref in parse dev addr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.12 by commit...

GSD-2021-1000968 net: ieee802154: fix null deref in parse dev addr

net: ieee802154: fix null deref in parse dev addr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.45 by commit...

GSD-2021-1000908 net: ieee802154: fix null deref in parse dev addr

net: ieee802154: fix null deref in parse dev addr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.127 by commit...

The vulnerability of implementations of algorithms such as WEP, WPA, WPA2, and WPA3 for IEEE 802.11 communication standards allows attackers to inject arbitrary network packets and/or compromise the integrity of protected information.

The vulnerability of implementations of algorithms such as WEP, WPA, WPA2, and WPA3 for IEEE 802.11 communication standards exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to inject arbitrary network packets and/or compromise the...

SUSE: Security Advisory (SUSE-SU-2015:1098-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2016:2212-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SonicWall 802.11 Frame Aggregation and Fragmentation Vulnerabilities (FragAttacks)

Vulnerabilities in IEEE 802.11 implementation were found. These vulnerabilities could allow an attacker to inject malicious frames into legitimate WiFi traffic. The discovered vulnerabilities affect all modern security protocols of WiFi, including the latest WPA3. Successful exploitation of these...

Moderate: wpa_supplicant security, bug fix, and enhancement update

The wpasupplicant packages contain an 802.1X Supplicant with support for WEP, WPA, WPA2 IEEE 802.11i / RSN, and various EAP authentication methods. They implement key negotiation with a WPA Authenticator for client stations and controls the roaming and IEEE 802.11 authentication and association o...

Nearly All Wi-Fi Devices Are Vulnerable to New FragAttacks

Three design and multiple implementation flaws have been disclosed in IEEE 802.11 technical standard that undergirds Wi-Fi, potentially enabling an adversary to take control over a system and plunder confidential data. Called FragAttacks short for FRgmentation and AGgregation Attacks, the...

PT-2021-7674 · Linux +7 · Linux Kernel +7

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a NULL pointer dereference flaw in the Linux kernel's IEEE 802.15.4 wireless networking subsystem. This occurs when a user closes the LR-WPAN connection,...