openSUSE-SU-2021:0519-1

Import Source

JSON Data

https://api.osv.dev/v1/vulns/openSUSE-SU-2021:0519-1

Related

Published

2021-04-08T22:41:46Z

Modified

2021-04-08T22:41:46Z

Summary

Security update for hostapd

Details

This update for hostapd fixes the following issues:

CVE-2021-30004: forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c (boo#1184348)
CVE-2020-12695: UPnP SUBSCRIBE misbehavior in hostapd WPS AP (boo#1172700)
CVE-2019-16275: AP mode PMF disconnection protection bypass (boo#1150934)
added AppArmor profile (source apparmor-usr.sbin.hostapd)

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.9-lp152.2.3.1

{
    "binaries": [
        {
            "hostapd": "2.9-lp152.2.3.1"
        }
    ]
}