Skip to content

T7864: Bump HostAP version to 2.11 - #1044

Merged
dmbaturin merged 1 commit into
vyos:currentfrom
asklymenko:patch-4
Sep 25, 2025
Merged

T7864: Bump HostAP version to 2.11#1044
dmbaturin merged 1 commit into
vyos:currentfrom
asklymenko:patch-4

Conversation

@asklymenko

Copy link
Copy Markdown
Contributor

Change summary

it is required to bump the HostAP version because of the following vulnerability: CVE-2024-5290

Types of changes

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Code style update (formatting, renaming)
  • Refactoring (no functional changes)
  • Migration from an old Vyatta component to vyos-1x, please link to related PR inside obsoleted component
  • Other (please describe):

Related Task(s)

Related PR(s)

Checklist:

  • I have read the CONTRIBUTING document
  • I have linked this PR to one or more Phabricator Task(s)
  • My commit headlines contain a valid Task id
  • My change requires a change to the documentation
  • I have updated the documentation accordingly

Bump the HostAP package version to 2.11 to resolve security issues.
@github-actions

Copy link
Copy Markdown

👍
No issues in PR Title / Commit Title

@github-actions github-actions Bot added the current VyOS rolling release label Sep 25, 2025

@sever-sever sever-sever left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bump version fixes vulnerability

@sever-sever sever-sever left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bump version fixes vulnerability

@dmbaturin dmbaturin left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Let's do this for current and circinus, but for sagitta, we'll need to import just the fix.

@dmbaturin
dmbaturin merged commit ed29cdd into vyos:current Sep 25, 2025
8 checks passed
@vyosbot vyosbot added mirror-initiated This PR initiated for mirror sync workflow mirror-failed This PR mirror has failed mirror-completed and removed mirror-initiated This PR initiated for mirror sync workflow mirror-failed This PR mirror has failed labels Sep 25, 2025
@asklymenko
asklymenko deleted the patch-4 branch September 29, 2025 14:19
@asklymenko
asklymenko restored the patch-4 branch September 29, 2025 14:19
@asklymenko
asklymenko deleted the patch-4 branch September 29, 2025 14:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

current VyOS rolling release mirror-completed

Development

Successfully merging this pull request may close these issues.

5 participants