ELSA-2015-1090

ELSA-2015-1090 - wpa_supplicant security and enhancement update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2015-06-11

Description

[1:2.0-17]
- AP WMM: Fix integer underflow in WMM Action frame parser (rh #1221178) (rh #1222015)

[1:2.0-16]
- P2P: Validate SSID element length before copying it (CVE-2015-1863)

[1:2.0-15]
- Add domain_match config option from upstream (rh #1178263)
- Include peer certificate in EAP events for use by clients

[1:2.0-14]
- Use os_exec() for action script execution (CVE-2014-3686)

Related CVEs

CVE-2015-1863

CVE-2015-4142

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	wpa_supplicant-2.0-17.el7_1.src.rpm	f0f9952a0402b6dd98d3f51a41311d00dc74f68171873558052559e6a15d05a8	ELSA-2021-0808	ol7_x86_64_latest_archive
	wpa_supplicant-2.0-17.el7_1.src.rpm	f0f9952a0402b6dd98d3f51a41311d00dc74f68171873558052559e6a15d05a8	ELSA-2021-0808	ol7_x86_64_u1_patch
	wpa_supplicant-2.0-17.el7_1.src.rpm	f0f9952a0402b6dd98d3f51a41311d00dc74f68171873558052559e6a15d05a8	ELSA-2021-0808	ol7_x86_64_u2_base
	wpa_supplicant-2.0-17.el7_1.x86_64.rpm	eac76803334de1c9c4dcd1dc457390f459d56efe4d3af4e96f90455f12bae5a6	ELSA-2021-0808	ol7_x86_64_latest_archive
	wpa_supplicant-2.0-17.el7_1.x86_64.rpm	eac76803334de1c9c4dcd1dc457390f459d56efe4d3af4e96f90455f12bae5a6	ELSA-2021-0808	ol7_x86_64_u1_patch
	wpa_supplicant-2.0-17.el7_1.x86_64.rpm	eac76803334de1c9c4dcd1dc457390f459d56efe4d3af4e96f90455f12bae5a6	ELSA-2021-0808	ol7_x86_64_u2_base

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team