Stay Secure with the Latest Linux Advisories

security advisoryfedoracritical update

Fedora 40 iwd 2.16 Critical Update for Access Point Issues

iwd 2.16: Fix issue with uninitialized variable and DPP encrypt. Fix issue with Access Point mode and ATTR_MAC validation. Fix issue with Access Point mode and frequency attributes. Fix issue with P2P and handling client info description.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-3fa713f2e0 2024-03-23 00:20:56.399522 -------------------------------------------------------------------------------- Name : iwd Product : Fedora 40 Version : 2.16 Release : 1.fc40 URL : https://archive.kernel.org/oldwiki/iwd.wiki.kernel.org/ Summary : Wireless daemon for Linux Description : The daemon and utilities for controlling and configuring the Wi-Fi network hardware. -------------------------------------------------------------------------------- Update Information: iwd 2.16: Fix issue with uninitialized variable and DPP encrypt. Fix issue with Access Point mode and ATTR_MAC validation. Fix issue with Access Point mode and frequency attributes. Fix issue with P2P and handling client info description. Fix issue with P2P and handling parsing of service info. Fix issue with netconfig and handling domain list. Add support for forcing a default ECC group. -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 7 2024 Peter Robinson - 2.16-1 - Update to 2.16 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2263573 - iwd-2.15 is available https://bugzilla.redhat.com/show_bug.cgi?id=2263573 [ 2 ] Bug #2264597 - TRIAGE CVE-2023-52161 iwd: potential authorization bypass [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2264597 [ 3 ] Bug #2267652 - iwd-2.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=2267652 [ 4 ] Bug #2267710 - CVE-2024-28084 iwd: denial of service [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2267710 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-3fa713f2e0' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . The iwd 2.16 upgrade resolves multiple concerns, improving both security and performance for users on Fedora. Discover additional details.. iwd Update, Wireless Daemon Fixes, Fedora Security Advisory. . Severity: Critical. LinuxSecurity.com Team

Mar 23, 2024 •Critical Fedora