Accepted wpa 2:2.9.0-16 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 30 Nov 2020 10:02:04 +0100
Source: wpa
Architecture: source
Version: 2:2.9.0-16
Distribution: unstable
Urgency: high
Maintainer: Debian wpasupplicant Maintainers <wpa@packages.debian.org>
Changed-By: Andrej Shadura <andrewsh@debian.org>
Closes: 976091 976106
Changes:
wpa (2:2.9.0-16) unstable; urgency=high
.
* Restrict eapoltest to linux-any kfreebsd-any.
* Add an upstream patch to fix a crash with a long P2P interface name
(Closes: #976091).
* Security fix: CVE-2020-12695.
A vulnerability in the UPnP SUBSCRIBE command can trigger the AP to
initiate a HTTP (TCP/IP) connection to an arbitrary URL or to trigger
misbehavior in hostapd and cause the process to either get terminated
or to start using more CPU resources.
The issue can also be mitigated by building hostapd without UPnP support
(CONFIG_WPS_UPNP=n) or disabling it at runtime by removing the upnp_iface
parameter.
(Closes: #976106)
* Refresh patches.
Checksums-Sha1:
8cc1fe33312e34cc3676fda4bd0198a94c4f4fb7 2441 wpa_2.9.0-16.dsc
064366a6577ef4ca7f23d9b0cc08a1ea6218d69d 93144 wpa_2.9.0-16.debian.tar.xz
Checksums-Sha256:
71c2dbf31868953ae65239912e39164143399c20e9cec80d689953193c0f71c1 2441 wpa_2.9.0-16.dsc
ebf1c641c919933fb8065220c61057282148fedac3091328a938d81b3095bfee 93144 wpa_2.9.0-16.debian.tar.xz
Files:
7024789660fbc57063890c53c10c1af2 2441 net optional wpa_2.9.0-16.dsc
f354ed489277509aedc93dc51182f043 93144 net optional wpa_2.9.0-16.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCAAdFiEEeuS9ZL8A0js0NGiOXkCM2RzYOdIFAl/EtsgACgkQXkCM2RzY
OdLFagf8Dape0RlZGOhJaogiusZFxj/tZJlV1a13cA0BwwnN4U9PpwbMLF82RPvV
VCVzK2z12l/vWxH6W9Blk0T/9sNbCwYZuqDjeaIwX/UX9iLrr90M9c1dYqxoVfK9
urQeCEMSiehXa48N6wgdzj+h5CpgEckio2amGmedPifjktf9lpgowiXGcC582j1q
ypFP1rfugub2ibjpATAdc2tXzhNc6jiLeFAcgdSZP2AdsgFjguKhrkLq0wSn+LZn
43QBbyqosMZaYV9FUSH25ZpI+fNz/672dhNKBOvjTZiYkzPqq5ybZrbyopQIQUQm
Wo/KEidF0WUQyC5mtsypn6a5390xeA==
=y4db
-----END PGP SIGNATURE-----