The wpa_supplicant and hostapd packages are updated to fix a forging attacks that may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c. (CVE-2021-30004). References: - https://bugs.mageia.org/show_bug.cgi?id=29046 . MGASA-2021-0254 - Updated wpa_supplicant, hostapd packages fix security vulnerability Publication date: 13 Jun 2021 URL: https://advisories.mageia.org/MGASA-2021-0254.html Type: security Affected Mageia releases: 7, 8 CVE: CVE-2021-30004 The wpa_supplicant and hostapd packages are updated to fix a forging attacks that may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c. (CVE-2021-30004). References: - https://bugs.mageia.org/show_bug.cgi?id=29046 - - - https://www.cve.org/CVERecord?id=CVE-2021-30004 SRPMS: - 8/core/wpa_supplicant-2.9-8.2.mga8 - 8/core/hostapd-2.9-5.1.mga8 - 7/core/wpa_supplicant-2.9-1.5.mga7 - 7/core/hostapd-2.9-1.3.mga7 . MGASA-2021-0255 introduces essential modifications for wpa_supplicant and hostapd addressing vulnerabilities in computational processing mechanisms.. wpa_supplicant update, hostapd fix, Mageia security advisory. . Severity: Critical. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.