USN-4098-1: wpa_supplicant and hostapd vulnerability

Releases

• Ubuntu 19.04
• Ubuntu 18.04 ESM

Packages

• wpa - client support for WPA and WPA2

Details

It was discovered that wpa_supplicant and hostapd were vulnerable to a side
channel attack against EAP-pwd. A remote attacker could possibly use this
issue to recover certain passwords.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 19.04

• hostapd - 2:2.6-21ubuntu3.2
• wpasupplicant - 2:2.6-21ubuntu3.2

Ubuntu 18.04

• hostapd - 2:2.6-15ubuntu2.4
• wpasupplicant - 2:2.6-15ubuntu2.4

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

• CVE-2019-13377