- -------------------------------------------------------------------------
Debian LTS Advisory DLA-3738-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                           Chris Lamb
February 22, 2024                             https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : iwd
Version        : 0.14-2+deb10u1
CVE ID         : CVE-2023-52161
Debian Bug     : 1064062

It was discovered that there was an authentication bypass issue in
iwd, the Intel Wireless Daemon. Adversaries could have gained
unauthorised access to a protected 'home' (ie. non-WPA2-Enterprise)
WiFi network.

For Debian 10 buster, this problem has been fixed in version
0.14-2+deb10u1.

We recommend that you upgrade your iwd packages.

For the detailed security status of iwd please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/iwd

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS