[Git][security-tracker-team/security-tracker][master] Update status for wpa issue

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
870e3e07 by Salvatore Bonaccorso at 2026-11-01T14:40:37+01:00
Update status for wpa issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -421695,7 +421695,7 @@ CVE-2024-23456 (Anti-tampering can be disabled under certain conditions without
 CVE-2023-40819 (ID4Portais in version < V.2022.837.002a returns message parameter unsa ...)
 	NOT-FOR-US: ID4Portais
 CVE-2026-XXXX [wpa_config_write() follows symlinks (no O_NOFOLLOW) -> arbitrary root file overwrite by a netdev-group user]
-	- wpa <unfixed> (bug #1148985)
+	- wpa 2:2.11-7 (bug #1148985)
 	NOTE: https://bugs.launchpad.net/ubuntu/+source/wpa/+bug/2163513
 	NOTE: https://git.w1.fi/cgit/hostap/commit/?id=e3d1ebda8117c455547b8a9fb06460fb6a405373
 	NOTE: https://git.w1.fi/cgit/hostap/commit/?id=1037cc3678ef316ec65059897a941ac3bcfb44bb
@@ -421704,6 +421704,9 @@ CVE-2026-XXXX [wpa_config_write() follows symlinks (no O_NOFOLLOW) -> arbitrary
 	NOTE: https://git.w1.fi/cgit/hostap/commit/?id=4540af010df3f4d02240757fb0cbff29339a12c3
 	NOTE: https://git.w1.fi/cgit/hostap/commit/?id=e3937427e702f2efd45b2bd3cdc3e8591c3280e4
 	NOTE: https://git.w1.fi/cgit/hostap/commit/?id=50e7efc698f9211717f484614e04f42e4f4f7878
+	NOTE: https://git.w1.fi/cgit/hostap/commit/?id=e7a37b0876dc611195acfaec04fb53880a506666
+	NOTE: Apply additionally change to start activated wpa_supplicatn with -x/etc/wpa_supplicant/:
+	NOTE: https://salsa.debian.org/debian/wpa/-/blob/debian/2%252.11-7/debian/patches/bug1148985-09-restrict-dbus-config-prefix.patch
 CVE-2024-5290 (An issue was discovered in Ubuntu wpa_supplicant that resulted in load ...)
 	{DSA-5739-1}
 	- wpa 2:2.10-22



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/870e3e0798d74cb818933145bdf76f054e3938b5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/870e3e0798d74cb818933145bdf76f054e3938b5
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261101/6737a69f/attachment-0001.htm>