On Mon, 2017-10-16 at 17:51 +0100, Patrick O'Callaghan wrote:
> wpa_supplicant (used in Linux and Android) is particularly bad.

Just in case this point isn't getting enough emphasis: the specific
vulnerability in wpa_supplicant allows the adversary to force the use
of an all-0's encryption key. That could legitimately be called
disastrous. Patched versions of wpa_supplicant should be installed as
soon as they are available.

poc
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Reply via email to