Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package hostapd for openSUSE:Factory checked in at 2026-11-03 17:59:00 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/hostapd (Old) and /work/SRC/openSUSE:Factory/.hostapd.new.1257 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "hostapd" Tue Nov 3 17:59:00 2026 rev:53 rq:1394632 version:2.12 Changes: -------- --- /work/SRC/openSUSE:Factory/hostapd/hostapd.changes 2026-07-29 19:02:42.128788595 +0200 +++ /work/SRC/openSUSE:Factory/.hostapd.new.1257/hostapd.changes 2026-11-03 18:02:57.066949297 +0100 @@ -1,0 +2,31 @@ +Sun Oct 18 10:59:02 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to 2.12: + * More complete EHT/IEEE 802.11be/Wi-Fi 7 support, with fixes + for message validation issues that could enable DoS attacks + * Support RSN overriding, e.g. WPA3-Personal Compatibility Mode + * Reject unexpected SAE password identifier to avoid a DoS attack + against a specific station; mandate SAE H2E with password ids + * Support SPP A-MSDU negotiation and IEEE 802.11bi functionality + (EPPKE, association frame encryption, PMKID privacy) + * Support Automated Frequency Coordination (AFC) on 6 GHz + * EAP-TEAP protocol changes based on RFC 9930, incompatible + with previous versions + * Remove obsolete Host AP and Atheros WEXT driver interfaces + * Move rate configuration to BSS level instead of per-radio + * hostapd is not affected by CVE-2019-5061 (boo#1159188): + IAPP support was removed upstream in 2.10 + * hostapd is not affected by CVE-2019-10064 (boo#1165295): + PRNG seeding was fixed upstream in 2.10 + * hostapd is not affected by CVE-2022-37660 (boo#1237073): + the PKEX code is deleted on success since 2.11 +- Drop CVE-2025-24912.patch, fixed upstream +- Drop nl80211_NULL_pointer_check_for_link.patch, fixed upstream +- Drop CVE-2026-58374.patch, fixed upstream +- Drop Require-network_ctx-and-AKMP-match-for-accepting-PMK.patch, + fixed upstream +- Drop SAE-Fix-crash-due-to-NULL-pointer-dereference-in-H2E.patch, + fixed upstream +- Spec cleanup (spec-cleaner pass) + +------------------------------------------------------------------- Old: ---- CVE-2025-24912.patch CVE-2026-58374.patch Require-network_ctx-and-AKMP-match-for-accepting-PMK.patch SAE-Fix-crash-due-to-NULL-pointer-dereference-in-H2E.patch hostapd-2.11.tar.gz hostapd-2.11.tar.gz.asc nl80211_NULL_pointer_check_for_link.patch New: ---- hostapd-2.12.tar.gz hostapd-2.12.tar.gz.asc ----------(Old B)---------- Old: the PKEX code is deleted on success since 2.11 - Drop CVE-2025-24912.patch, fixed upstream - Drop nl80211_NULL_pointer_check_for_link.patch, fixed upstream Old:- Drop nl80211_NULL_pointer_check_for_link.patch, fixed upstream - Drop CVE-2026-58374.patch, fixed upstream - Drop Require-network_ctx-and-AKMP-match-for-accepting-PMK.patch, Old:- Drop CVE-2026-58374.patch, fixed upstream - Drop Require-network_ctx-and-AKMP-match-for-accepting-PMK.patch, fixed upstream Old: fixed upstream - Drop SAE-Fix-crash-due-to-NULL-pointer-dereference-in-H2E.patch, fixed upstream Old:- Drop CVE-2025-24912.patch, fixed upstream - Drop nl80211_NULL_pointer_check_for_link.patch, fixed upstream - Drop CVE-2026-58374.patch, fixed upstream ----------(Old E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ hostapd.spec ++++++ --- /var/tmp/diff_new_pack.l3kixM/_old 2026-11-03 18:02:58.609013848 +0100 +++ /var/tmp/diff_new_pack.l3kixM/_new 2026-11-03 18:02:58.612013974 +0100 @@ -18,11 +18,10 @@ %bcond_without apparmor Name: hostapd -Version: 2.11 +Version: 2.12 Release: 0 Summary: Daemon for running a WPA capable Access Point License: BSD-3-Clause OR GPL-2.0-only -Group: Hardware/Wifi URL: https://w1.fi/ Source: https://w1.fi/releases/hostapd-%{version}.tar.gz Source1: https://w1.fi/releases/hostapd-%{version}.tar.gz.asc @@ -31,21 +30,12 @@ Source3: config Source4: hostapd.service Source5: apparmor-usr.sbin.hostapd -# PATCH-FIX-UPSTREAM CVE-2025-24912.patch, bsc#1239461, CVE-2025-24912 -Patch1: CVE-2025-24912.patch -# PATCH-FIX-UPSTREAM bsc#1268083 hostapd segmentation fault during fast restart cycles -Patch2: nl80211_NULL_pointer_check_for_link.patch -# PATCH-FIX-UPSTREAM CVE-2026-58374, bsc#1269892 Missing multi-link parsing validation -Patch3: CVE-2026-58374.patch -# PATCH-FIX-UPSTREAM https://w1.fi/security/2026-2/ -Patch4: Require-network_ctx-and-AKMP-match-for-accepting-PMK.patch -# PATCH-FIX-UPSTREAM https://w1.fi/security/2026-3/ -Patch5: SAE-Fix-crash-due-to-NULL-pointer-dereference-in-H2E.patch -BuildRequires: libnl3-devel BuildRequires: openssl-devel BuildRequires: pkgconfig -BuildRequires: sqlite3-devel BuildRequires: pkgconfig(libnl-3.0) >= 3.0 +BuildRequires: pkgconfig(libnl-genl-3.0) +BuildRequires: pkgconfig(libnl-route-3.0) +BuildRequires: pkgconfig(sqlite3) BuildRequires: pkgconfig(systemd) %{?systemd_requires} %if %{with apparmor} @@ -91,8 +81,8 @@ install -D -m 0644 %{SOURCE4} %{buildroot}%{_unitdir}/hostapd.service %if %{with apparmor} # AppArmor profile -mkdir -p %{buildroot}%{_sysconfdir}/apparmor.d -install -m 0644 %{SOURCE5} %{buildroot}%{_sysconfdir}/apparmor.d/usr.sbin.hostapd +mkdir -p %{buildroot}%{apparmor_profilesdir} +install -m 0644 %{SOURCE5} %{buildroot}%{apparmor_profilesdir}/usr.sbin.hostapd %endif %pre @@ -101,7 +91,7 @@ %post %service_add_post hostapd.service %if %{with apparmor} -%apparmor_reload %{_sysconfdir}/apparmor.d/usr.sbin.hostapd +%apparmor_reload %{apparmor_profilesdir}/usr.sbin.hostapd %endif %preun @@ -113,8 +103,8 @@ %files %config(noreplace) %{_sysconfdir}/hostapd.* %if %{with apparmor} -%dir %{_sysconfdir}/apparmor.d -%config %{_sysconfdir}/apparmor.d/usr.sbin.hostapd +%dir %{apparmor_profilesdir} +%config %{apparmor_profilesdir}/usr.sbin.hostapd %endif %{_sbindir}/* %license COPYING ++++++ hostapd-2.11.tar.gz -> hostapd-2.12.tar.gz ++++++ ++++ 109966 lines of diff (skipped)
