USN-3505-1: Linux firmware vulnerabilities
USN-3505-1: Linux firmware vulnerabilities Ubuntu Security Notice USN-3505-1 6th December, 2017 linux-firmware vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 17.10 Ubuntu 17.04 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary Several security issues were fixed in linux-firmware. Software description linux-firmware – Firmware for Linux kernel drivers Details Mathy Vanhoef discovered that the firmware for several Intel WLANdevices incorrectly handled WPA2 in relation to Wake on WLAN. Aremote attacker could use this issue with key reinstallation attacksto obtain sensitive information. (CVE-2017-13080, CVE-2017-13081) Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 17.10: linux-firmware 1.169.1 Ubuntu 17.04: linux-firmware 1.164.2 Ubuntu 16.04 LTS: linux-firmware 1.157.14 Ubuntu 14.04 LTS: linux-firmware 1.127.24 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. After a standard system update you need to reboot your computer [ more… ]