git: e4e2f564de99 - Create tag vendor/wpa/2.12

The annotated tag vendor/wpa/2.12 has been created by cy:

URL: https://cgit.FreeBSD.org/src/tag/?h=vendor/wpa/2.12

tag vendor/wpa/2.12
Tagger:     Cy Schubert <[email protected]>
TaggerDate: 2026-08-10 14:08:36 +0000

wpa: Tag 2.12

commit 513264698a892550ba20aeb9da7f360417fdc63b
Author:     Cy Schubert <[email protected]>
AuthorDate: 2026-08-10 13:56:41 +0000
Commit:     Cy Schubert <[email protected]>
CommitDate: 2026-08-10 13:56:41 +0000

    wpa: Update to 2.12
    
    Fixes and new features include:
    
    hostapd:
    * support RSN overriding (e.g., WPA3-Personal Compatibility Mode)
    * EHT/IEEE 802.11be/Wi-Fi 7
      - more complete support
      - fix message validation issues that could enable DoS attacks
      - fix group key rekeying
    * enable SAE group 20 by default if SAE-EXT-KEY is enabled
    * reject unexpected SAE password identifier to avoid DoS attack against
      a specific STA
    * mandate use of SAE H2E when using password identifiers
    * assign VLAN when using SAE with PMKSA caching
    * support SPP A-MSDU negotiation
    * support IEEE 802.11bi functionality
      - changing SAE password identifiers
      - EPPKE
      - IEEE 802.1X/EAP in Authentication frames
      - Association frame encryption
      - PMKID privacy
    * remove the driver interface for now obsolete Host AP driver
    * remove the driver interface for now obsolete Atheros WEXT interface
    * move supported, basic, and Beacon TX rate configuration to be at BSS
      level instead of per-radio for all BSSs
    * fix various issues in Multiple-BSSID functionality
    * support OpenSSL 3.0 API changes
    * EAP-TEAP: protocol changes based on RFC 9930; this is not compatible
      with previous versions
    * support Automated Frequency Coordination (AFC) on the 6 GHz band
    * improve GAS/ANQP processing to support larger ANQP responses
    * a large number of other fixes, cleanup, and extensions
    
    wpa_supplicant:
    * support RSN overriding (e.g., WPA3-Personal Compatibility Mode)
    * improve BSS transition management support
    * EHT/IEEE 802.11be/Wi-Fi 7
      - more complete support
      - fix message validation issues that could enable DoS attacks
    * support Wi-Fi Direct R2
    * support Wi-Fi Aware (add synchronized NAN; extend USD support)
    * support Proximity Ranging
    * support SPP A-MSDU negotiation
    * support IEEE 802.11bi functionality
      - changing SAE password identifiers
      - EPPKE
      - IEEE 802.1X/EAP in Authentication frames
      - Association frame encryption
      - PMKID privacy
    * enable layer 2/Wi-Fi multicast filtering for all networks (not
      just some Passpoint networks which enabled this before)
    * wpa_gui: port to Qt6
    * support OpenSSL 3.0 API changes
    * EAP-TEAP: protocol changes based on RFC 9930; this is not compatible
      with previous versions
    * maintain configuration file permissions when writing updated
      configuration
    * add option to validate PKCS#11/OpenSC engine and module paths
    * fix PMKSA caching to enforce network context to avoid misuse of
      unexpected PMKSA cache entries
    * fix a potential DoS attack in SAE processing of an unexpected element
    * fix incomplete bounds checking of mesh AMPE messages that could have
      resulted in DoS attacks and memory corruption
    * a large number of other fixes, cleanup, and extensions