Reprinted from TidBITS by permission; reuse governed by Creative Commons
license BY-NC-ND 3.0. TidBITS has offered years of thoughtful commentary
on Apple and Internet topics. For free email subscriptions and access to the
entire TidBITS archive, visit http://www.tidbits.com/


   AirPort Base Station Firmware Updates 7.6.9 and 7.7.9

   Agen G. N. Schmitz

   Apple has released firmware updates for AirPort Extreme and AirPort
   Time Capsule base stations with [1]802.11ac Wi-Fi (the tower-like
   models receive Firmware Update 7.7.9), as well as older AirPort
   Express, AirPort Extreme, and AirPort Time Capsule models with
   [2]802.11n Wi-Fi (Firmware Update 7.6.9). Both updates patch the KRACK
   exploit (see '[3]Wi-Fi Security Flaw Not As Bad As It's KRACKed Up To
   Be,' 17 October 2017), improving the handling of state transitions to
   prevent reusing a nonce (aka, Number ONCE, an arbitrary number that can
   only be used once) in WPA multicast/GTK clients. Update 7.7.9 also
   addresses a memory corruption issue that enabled an attacker within
   range to be able to execute arbitrary code on the Wi-Fi chip. You must
   update your AirPort base station using AirPort Utility on your Mac or
   an iOS device with the free AirPort Utility app installed (the download
   isn't available via the Apple Support Web page or Software Update).
   (Free, [4]release notes for 7.6.9, [5]release notes for 7.7.9)

References

   1. https://support.apple.com/kb/DL1948
   2. https://support.apple.com/kb/DL1949
   3. http://tidbits.com/article/17572
   4. https://support.apple.com/en-us/HT208258
   5. https://support.apple.com/en-us/HT208354

.