Alerts This Week
Warning Icon 1 681
Alerts This Week
Warning Icon 1 681

Slackware 14.1: 2014-344-07 Critical: Command Execution in Wpa_Supplicant

slackware
Calendar Grey December 11, 2014
Dist Slackware Esm H88
The wpa_supplicant components for Slackware have been revised to address a critical vulnerability that could allow for unauthorized remote command execution across several versions.
New wpa_supplicant packages are available for Slackware 13.37, 14.0, 14.1, and -current to fix security issues

Summary

Here are the details from the Slackware 14.1 ChangeLog: patches/packages/wpa_supplicant-2.3-i486-1_slack14.1.txz: Upgraded. This update fixes a remote command-execution vulnerability caused by a failure to adequately sanitize user-supplied input. For more information, see: https://www.cve.org/CVERecord?id=CVE-2014-3686 (* Security fix *)

Where Find New Packages

Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.

Updated package for Slackware 13.37: ftp://ftp.slackware.com/pub/slackware/slackware-13.37/patches/packages/wpa_supplicant-0.7.3-i486-4_slack13.37.txz
Updated package for Slackware x86_64 13.37: ftp://ftp.slackware.com/pub/slackware/slackware64-13.37/patches/packages/wpa_supplicant-0.7.3-x86_64-4_slack13.37.txz
Updated package for Slackware 14.0:
Updated package for Slackware x86_64 14.0:
Updated package for Slackware 14.1:
Updated package for Slackware x86_64 14.1:
Updated package for Slackware -current:
Updated package for Slackware x86_64 -current:

MD5 Signatures

Slackware 13.37 package: 2b43eae00bb9245e835d867528523c4a wpa_supplicant-0.7.3-i486-4_slack13.37.txz
Slackware x86_64 13.37 package: 36aaddb14603ab8a45781c13ecb65c24 wpa_supplicant-0.7.3-x86_64-4_slack13.37.txz
Slackware 14.0 package: 79bef8ac202aa4a5fc0631ecb7ab1210 wpa_supplicant-1.0-i486-2_slack14.0.txz
Slackware x86_64 14.0 package: 6f00a823ed0e27b234fafb597bf2e357 wpa_supplicant-1.0-x86_64-2_slack14.0.txz
Slackware 14.1 package: adf16114ad0f1b8563194098fc69d196 wpa_supplicant-2.3-i486-1_slack14.1.txz
Slackware x86_64 14.1 package: dc974e09d72c233e7c5bdb736b28fe2d wpa_supplicant-2.3-x86_64-1_slack14.1.txz
Slackware -current package: 085b106987fc33dd4f0c23f61d9be041 n/wpa_supplicant-2.3-i486-1.txz
Slackware x86_64 -current package: aaecb38f9fb189b2a9fc0dd8973644d1 n/wpa_supplicant-2.3-x86_64-1.txz

Severity
critical
Lowest
Low
Medium
High
Critical

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg wpa_supplicant-2.3-i486-1_slack14.1.txz

Related News

Your message here