This patch update the hostapd to include the Krack fix
opkg update and opkg upgrade should solve the problem but wouldn't have a bad idea make a new firmware with this updated packages.
Thanks for the info, actually i use lede to build the kernel & rootfs so it should be ok. openwrt is essentially abandoned by the main developers.
Looking at hostpad patches there https://github.com/lede-project/source/tree/master/package/network/servi...
i pulled about a week ago for for cloudhub 3.4.6 so i think it should be ok already