Format: 1.8 Date: Fri, 10 Oct 2014 09:27:24 -0400 Source: wpasupplicant Binary: wpasupplicant wpagui Architecture: i386 Version: 0.6.9-3ubuntu3.2 Distribution: lucid Urgency: medium Maintainer: Ubuntu/amd64 Build Daemon Changed-By: Marc Deslauriers Description: wpagui - graphical user interface for wpa_supplicant wpasupplicant - client support for WPA and WPA2 (IEEE 802.11i) Changes: wpasupplicant (0.6.9-3ubuntu3.2) lucid-security; urgency=medium . * SECURITY UPDATE: arbitrary command execution via unsanitized string passed to action scripts by wpa_cli - debian/patches/CVE-2014-3686.patch: added os_exec() helper to src/utils/os.h, src/utils/os_unix.c, src/utils/os_win32.c, use instead of system() in wpa_supplicant/wpa_cli.c. - CVE-2014-3686 Checksums-Sha1: 3fc6c0a5f77e4dd4063a61054b34798aa862a4a5 363448 wpasupplicant_0.6.9-3ubuntu3.2_i386.deb 0627d0d4a46a89738035c108a5188c144d9c0ccc 143496 wpagui_0.6.9-3ubuntu3.2_i386.deb Checksums-Sha256: abffd9b1210cbec8499dcc3014bc955cb2c50d546619eb3e922127e6363164b1 363448 wpasupplicant_0.6.9-3ubuntu3.2_i386.deb 35a4fdf62d395fc11b1d1a9d42aae44964cd27b19ff2936b2bf09105fab63362 143496 wpagui_0.6.9-3ubuntu3.2_i386.deb Files: f389ca6c4fef1c98424e9c57ae970588 363448 net optional wpasupplicant_0.6.9-3ubuntu3.2_i386.deb ff802c3be21a350f76366a5f78900a55 143496 net optional wpagui_0.6.9-3ubuntu3.2_i386.deb Original-Maintainer: Debian/Ubuntu wpasupplicant Maintainers