• Accepted wpa 2:2.10-24 (source) into unstable

    From Debian FTP Masters@21:1/5 to All on Sat Mar 22 07:20:01 2025
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    Format: 1.8
    Date: Sat, 22 Mar 2025 07:06:15 +0100
    Source: wpa
    Architecture: source
    Version: 2:2.10-24
    Distribution: unstable
    Urgency: medium
    Maintainer: Debian wpasupplicant Maintainers <wpa@packages.debian.org> Changed-By: Andrej Shadura <andrewsh@debian.org>
    Changes:
    wpa (2:2.10-24) unstable; urgency=medium
    .
    [ Hlib Korzhynskyy ]
    * SECURITY UPDATE: Encrypted element reusage
    - debian/patches/CVE-2022-37660.patch: Add hostapd_dpp_pkex_clear_code()
    and wpas_dpp_pkex_clear_code(), and clear code reusage in
    ./src/ap/dpp_hostapd.c and ./wpa_supplicant/dpp_supplicant.c
    - CVE-2022-37660.
    Checksums-Sha1:
    8661b597cfa55543ee7fac46f8ad346703877302 2184 wpa_2.10-24.dsc
    3f5f3dab989309fccc95e02e14947cc974801c9f 95064 wpa_2.10-24.debian.tar.xz Checksums-Sha256:
    78e9a5913fa5f398a6ce8d8bcfb0ff1ab2f210363ee0b81225f3d524990bcb25 2184 wpa_2.10-24.dsc
    50a74de691e325e7ac4b35be61d0e0309231c6ec06be0b797fb8715118384c3f 95064 wpa_2.10-24.debian.tar.xz
    Files:
    14767046fcc9428ff6379dde98e0441b 2184 net optional wpa_2.10-24.dsc
    f88e6ab438c1e7ac1bb4364e994be7d6 95064 net optional wpa_2.10-24.debian.tar.xz

    -----BEGIN PGP SIGNATURE-----

    iHUEARYKAB0WIQSD3NF/RLIsyDZW7aHoRGtKyMdyYQUCZ95TkQAKCRDoRGtKyMdy YR8JAP43yh1G5CJgfznNVobPeuqq4MyA4YufGSjXZjwTlQQLrQEAhETEiplP0hBG r2qXqiR1PEA1QGgwRgvmVKtqpc+ZgQ4=
    =Qu9a
    -----END PGP SIGNATURE-----


    --==============…36927216500656531=Content-Type: application/pgp-signature

    -----BEGIN PGP SIGNATURE-----

    iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCZ95WcAAKCRCb9qggYcy5 IbAAAPsHmZOvJ0i8T0UQBNG6QFJQgxkcsxP7OjEJyZ5VzEm/ZwD+NTcsYpYHUr+O iX5LwQZBzhfmHdx2ch3nAKJrrQJBkgc=Syxw
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)