debcrafters-packages team mailing list archive

[Launchpad Bug Tracker <2117497@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package wpa - 2:2.11-0ubuntu1

---------------
wpa (2:2.11-0ubuntu1) questing; urgency=medium

  * New upstream release (LP: #2117497)
    - d/p/0019-Send-CTRL-EVENT-SIGNAL-CHANGE-message-to-control-int.patch:
      refreshed
    - d/p/0002-AP-guard-FT-SAE-code-with-CONFIG_IEEE80211R_AP.patch:
      refreshed to fit with WPA_KEY_MGMT_FT_SAE_EXT_KEY too.
    - Dropped patches, merged upstream:
      d/p/upstream-fixes/001*
      d/p/0003-OpenSSL-Drop-security-level-to-0-with-OpenSSL-3.0-wh.patch
      d/p/0017-CVE-2023-52160-PEAP-client-Update-Phase-2-authentica.patch
      d/p/CVE-2022-37660.patch

 -- Antoine Lassagne <antoine.lassagne@xxxxxxxxxxxxx>  Thu, 24 Jul 2025
10:36:27 +0200

** Changed in: wpa (Ubuntu)
       Status: Fix Committed => Fix Released

** CVE added: https://cve.org/CVERecord?id=CVE-2022-37660

** CVE added: https://cve.org/CVERecord?id=CVE-2023-52160

-- 
You received this bug notification because you are a member of
Debcrafters packages, which is subscribed to wpa in Ubuntu.
https://bugs.launchpad.net/bugs/2117497

Title:
  Upgrade to 2.11

Status in wpa package in Ubuntu:
  Fix Released

Bug description:
  hostapd/wpa_supplicant got a new version:
  https://lists.infradead.org/pipermail/hostap/2024-July/042847.html

  This issue is about bumping the version Ubuntu. Debian is not up-to-
  date, yet.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/wpa/+bug/2117497/+subscriptions