lp:debian/stretch/wpa

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

11. By Steinar H. Gunderson on 2015-08-30

* Non-maintainer upload.
* Import four patches from upstream git (wpasupplicant_band_selection_*.patch),
  manually unfuzzed, to improve 2.4/5 GHz band selection. (Closes: #795722)

10. By Stefan Lippers-Hollmann <email address hidden> on 2015-04-23

* remove Kel Modderman from Uploaders as per his request, many thanks for
  all past efforts Kel.
* fix systemd unit dependencies for wpasupplicant, it needs to be started
  before the network target (Closes: 780552), many thanks to Michael Biebl
  <email address hidden> for reporting and suggesting the patch.
* hostapd: avoid segfault with driver=wired, by merging upstream commit
  e9b783d58c23a7bb50b2f25bce7157f1f3b5d58b "Fix hostapd operation without
  hw_mode driver data."
* import "P2P: Validate SSID element length before copying it
  (CVE-2015-1863)" from upstream (Closes: #783148).

9. By Stefan Lippers-Hollmann <email address hidden> on 2014-10-14

* New upstream release:
  - fixed by the new upstream version:
    + wpa: arbitrary command execution via action scripts (Closes: #765352).
      wpasupplicant: fixed wpa_cli action script execution to use more
      robust mechanism (CVE-2014-3686).
      hostapd: fixed hostapd_cli action script execution to use more robust
      mechanism (CVE-2014-3686).
    + wpasupplicant: MAC addressing changing broken after updating to 2.2-1
      (Closes: #763775).
    + drop ap_config_c_fix-typo-for-capabilities, applied upstream.
  - backport "Include ieee802_11_common.c in wpa_supplicant build
    unconditionally" from HEAD, to fix a newly introduced FTBS on, at least,
    kfreebsd.
* bump standards version to 3.9.6, no changes necessary.

8. By Stefan Lippers-Hollmann <email address hidden> on 2014-09-17

* New upstream release:
  - import suggested changes from Gerald Turner <email address hidden> (see
    #718651 for details).
    + disable ACS for hostapd on kfreebsd-any (FTBS).
  - fixed by the new upstream version:
    + wpa_supplicant: OpenSSL: tls_connection_handshake - Failed to read
    (Closes: #561081).
    + wpasupplicant: new upstream release 2.2 (Closes: #718651).
    + wpasupplicant: -s option not documented in man page (Closes: #608135).
  - refresh patches:
    + drop 13_human_readable_signal.patch, applied upstream.
    + drop hostapd_fix-WDS-VLAN-bridge-handling.patch, applied upstream.
    + drop fix-spelling-s-algorith-algorithm.patch, applied upstream.
  - adapt build configs for hostapd/ wpa_supplicant 2.2:
    + sync with updated upstream defconfigs.
    + keep Hotspot 2.0 support disabled for the time being.
    + hostapd: keep sqlite3 support disabled for the time being.
  - update debian/copyright manually, the wpa v2 branch was relicensed from
    (BSD-3-clause || GPL-2) to BSD-3-clause only (for the most part). This
    doesn't change the licensing state as the BSD-3-clause license is
    compatible with GPL-2.
* drop pre-wheezy /lib/init/rw/sendsigs.omit.d/ migration support, invert the
  versioned initscripts dependency to a versioned breaks relation.
* migrate from /var/run/ to /run/.
* adapt get-orig-source for wpa 2.2.
* drop version qualifiers for libnl3 build dependencies, as they're
  fullfilled by wheezy.
* drop version qualifiers for the lsb-base build dependency, as they're
  fullfilled by squeeze.
* shorten short description for hostapd.
* sort debian/control entries.
* make lintian happy (invalid-short-name-in-dep5-copyright bsd) and call it
  BSD-3-clause.
* enable DEBUG_SYSLOG and set DEBUG_SYSLOG_FACILITY=LOG_DAEMON, as requested
  by Cyril Brulebois <email address hidden> to improve logging options for d-i and
  netcfg (Closes: #761922).
* fix various typos around "existence", thanks to A. Costa <email address hidden>,
  (Closes: #683636).
* ap_config.c: fix typo for "capabilities".
* remove no longer required lintian override (spelling-error-in-binary for
  the).

7. By Stefan Lippers-Hollmann <email address hidden> on 2014-02-21

* New upstream release:
  - drop 11_wpa_gui_ftbfs_gcc_4_7, applied upstream.
  - drop EAP-TLS-server_fix-TLS-Message-length-validation, applied upstream.
  - fixes:
    - EAP access point constantly roaming with proactive key caching
      (Closes: #711063).
* enable IBSS RSN, thanks to Nicolas Cavallari <email address hidden>
  (Closes: #678147).
* enable simple AP support for wpasupplicant, thanks to Patrik Flykt
  <email address hidden> (Closes: #690536).
* use the readline6, wpa_cli doesn't link to openssl.
* link with --as-needed.
* compress binaries with xz.
* debian/get-orig-source: switch to xz compressed upstream tarballs.
* debian/get-orig-source: adapt for the post 1.x upstream branch.
* debian/get-orig-source: support named snapshots, see debian/README.source
  for detailed syntax and semantics.
* debian/README.source: explain fetching git snapshots by specifying their
  git hash.
* debian/README.source: update to match current reality and apply grammar
  fixes.
* debian/README.source: drop trailing whitespace.
* fix hardening flags, thanks a lot to Florent Daigniere
  <email address hidden> (Closes: #725865).
* debian/control: fold dependencies.
* bump standards version to 3.9.5, no changes necessary.
* reflect reality and adapt the maintainer mail address not to claim
  representing Ubuntu.
* drop wheezy-specific comments in the configuration files.
* glob 'wpa-password' as well and hide its debugging output, this hopefully
  closes: #728092.
* enable EAP-FAST, openssl in Debian is now new enough (Closes: #685685).
* update to new alioth URIs (vcs-field-not-canonical).
* add Keywords entry for desktop files (desktop-entry-lacks-keywords-entry).
* functions.sh: s/particuarly/particularly/, thanks to Vincent Lefevre
  <email address hidden> (Closes: #734422).
* fix FTBS using gcc-4.8 by linking with -ldl on kfreebsd-any; the udeb
  packages don't provide EAP support and are therefore unaffected. This is
  already accounted for by the upstream Makefile, however wrongly depending
  on !CONFIG_DRIVER_BSD, while it is actually depending on the target libc
  rather than the kernel (Closes: #737465). Thanks to Cyril Brulebois
  <email address hidden> and Steven Chamberlain <email address hidden>.
* import "hostapd: Fix WDS VLAN bridge handling" by Felix Fietkau
  <email address hidden> from upstream, thanks to Mark Hindley
  <email address hidden> (Closes: #737109).
* drop build-conflicts with libqt3-dev as the package is no longer available
  >= lenny, thanks to Michael Biebl <email address hidden>.
* drop pre-dependency on dpkg (>= 1.15.6~), data.tar.xz-member-without-dpkg-
  pre-depends is no longer a problem after Ubuntu lucid is EOL. Thanks to
  Michael Biebl for noticing.
* drop build-dependency on libdbus-glib-1-dev, it is no longer required for
  dbus-binding-tool, thanks to Michael Biebl.
* allow parallel building.
* fix spelling s/algorith/algorithm/.
* add lintian overrides for false positive spelling complaints.

6. By dkg on 2013-12-05

* Non-Maintainer Upload
* enable IBSS RSN, thanks to Nicolas Cavallari <email address hidden>
  (Closes: #678147).

5. By Stefan Lippers-Hollmann <email address hidden> on 2012-10-08

* ship forgotten README-P2P.
* revert to GNU readline for wpa_cli, instead of using the internal readline
  implementation added in wpa 1~. Prefer libreadline-gplv2-dev, because libnl
  is GPL-2 (only) - switching back to the internal readline implementation is
  targeted for wheezy+1 (Closes: #677993, #678077).
* Fix DoS via specially crafted EAP-TLS messages with longer message
  length than TLS data length (CVE-2012-4445, DSA 2557-1, Closes: #689990).

4. By Kel Modderman <email address hidden> on 2012-05-14

* Really enable hardened build flags, thanks Simon Ruderich
  <email address hidden>. (Closes: #657332)
* Do not suppress compilation output, set V=1.

3. By Kel Modderman <email address hidden> on 2012-05-11

[ Stefan Lippers-Hollmann ]
* New upstream release, no code changes since 1.0~rc3.
* upload to unstable, to fix FTBS with gcc-4.7.
* update debian/README.source.

[ Kel Modderman ]
* No longer explicitly add --as-needed to LDFLAGS, it is no longer
  required since wpa_cli stopped linking to libreadline (WPA_CLI_EDIT=y).

2. By Kel Modderman <email address hidden> on 2012-04-21

[ Stefan Lippers-Hollmann ]
* import new upstream snapshot 1.0-rc3:
  - fixes:
    - hostapd: Fails to authenticate on wpa2 password (Closes: #483924)
    - hostapd: EAPOL reauthentication/rekeying timeout loop when using WMM
      (Closes: #655129, #659059)
  - rebase patches:
    - libnl3-includes
  - update hostapd configs.
  - update wpa_supplicant configs.
* merge source packages for hostapd and wpasupplicant under the new name
  "wpa", which is also used by upstream.
* restrict wpasupplicant to linux-any and kfreebsd-any, hurd lacks kernel
  support.
* bump standards version to 3.9.3, no changes necessary.
* update dep-5 version to final 1.0, no changes necessary:
  - order licenses alphabetically.
* build-depend on docbook-to-man explicitly.
* convert packaging to Multi-Arch, bump compat level to 9 and debhelper
  build-dependency accordingly; all binaries are Multi-Arch=foreign.
* update debian/copyright for wpa 1.0~rc2 and merged sources.
* fix clean target and make sure to succeed building twice in a row.
* drop build-dependency on libreadline-dev, it's no longer needed with
  WPA_CLI_EDIT.
* remove watch file, there is no corresponding upstream tarballs at the
  moment.
* add (temporary?) get-orig-source target to debian/rules, which fetches the
  last tagged upstream version corresponding to debian/changelog.
  - add a lintian override for this, upstream doesn't want to release
    tarballs at the moment.
* use epoche only for hostapd binaries.

[ Kel Modderman ]
* export BINDIR=/sbin, the build system now requires it when patching
  D-Bus/systemd configuration.
* quieten the upstream build system so that errors/warning are more visible.
* assist with adaptation of debian/rules for merge of wpa_supplicant/hostapd:
  - add docbook-utils to build dependency list and make documentation from
    sgml source
  - ensure shared code under src/ is cleaned between wpa_supplicant/hostapd
    builds
  - put wpa_supplicant/hostapd ifupdown hooks in their own namespace, adapt
    installation of ifupdown hooks
* drop the netdev_wrapper script from wpagui and associated patch
* install systemd service unit file
* refresh D-Bus service activation file patch which starts process with
  syslog and control socket support, also patch systemd service file
* drop 09_dbus_emit_change_events.patch, applied upstream.
* fix ftbfs with gcc/g++ 4.7 (Closes: 667416)
* unfortunately, hostapd package historically added an epoch, so an epoch
  must now be added to this source package too.
* enable hardened build flags. (Closes: #657332)
* remove DEB_BUILD_OPTIONS=noopt handling from debian/rules, no longer
  required since dpkg-buildflags honors it.
* Add ability to set CC for cross building support (untested).
* Remove Faidon Liambotis <email address hidden> from Uploaders as per
  his request, many thanks for all past efforts Faidon.
* Only build manpages from docbook source, we do not currently use the
  html or pdf products.