Security update for hostapd
This update for hostapd fixes the following issues: - CVE-2021-30004: forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c (boo#1184348) - CVE-2020-12695: UPnP SUBSCRIBE misbehavior in hostapd WPS AP (boo#1172700) - CVE-2019-16275: AP mode PMF disconnection protection bypass (boo#1150934) - added AppArmor profile (source apparmor-usr.sbin.hostapd) This update was imported from the openSUSE:Leap:15.2:Update update project.
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for hostapd fixes the following issues: - CVE-2021-30004: forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c (boo#1184348) - CVE-2020-12695: UPnP SUBSCRIBE misbehavior in hostapd WPS AP (boo#1172700) - CVE-2019-16275: AP mode PMF disconnection protection bypass (boo#1150934) - added AppArmor profile (source apparmor-usr.sbin.hostapd) This update was imported from the openSUSE:Leap:15.2:Update update project.
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1150934
- https://bugzilla.suse.com/1172700
- https://bugzilla.suse.com/1184348
- https://lists.opensuse.org/archives/list/[email protected]/thread/7GHTARPJSUMITH7M3ESWRIZUIYW5UAM6/
- https://www.suse.com/security/cve/CVE-2019-16275
- https://www.suse.com/security/cve/CVE-2020-12695
- https://www.suse.com/security/cve/CVE-2021-30004