CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

net/hostapd-devel2026.09.22_2

IEEE 802.11 AP, IEEE 802.1X/WPA/WPA2/EAP/RADIUS Authenticator

0
unaddressed
0
VuXML only, still affected
0
fixed
Maintainer
cy@FreeBSD.org
Packages
hostapd-devel 2026.09.22_2
Upstream
up to date
CPE
w1.fi:hostapd from the port
WWW
https://w1.fi/hostapd/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (113)

Cy Schubert (cy) · 2026.09.22_2
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account.
2ac6dd5bb9
Cy Schubert (cy)
net/hostapd*: Add missing BSD driver

Reported by:		Franco Fichtner <franco@opnsense.org>
Obtained from:		opnsense commit aa30123
dbfa689100
Cy Schubert (cy)
{net,security}/{hostapd*,wpa_supplicant*}: Remove unneeded patch

Upstream has incorporated our patch. We can remove ours now.

Fixes:	d7e66a13b386, 2b067a2748cc, f37b72501299, f37b72501299
6c34779afd
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account.
2b067a2748
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account.
39a5a6f257
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account.
c35774b261
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account
564f77b6a2
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account
2912449532
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account
dde09ffcb2
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account
e18170192e
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account
56666f155b
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account.
58abbc111d
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account.
2e0fef117f
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account.
6cc7218690
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account.
a6ed22cceb
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account.
974fa425b5
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account.
8c7b510740
Cy Schubert (cy)
hostapd/* wpa_supplicant/*: Support CCMP-256/GMCP-256

Chase src/fa06d18b3b87 adding support for CCMP-256/GMCP-256.
60ebc751f7
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account.
d48f32f360
Cy Schubert (cy)
net/hostapd* security/wpa-supplicant*: Fix 13 and 14 builds

The updates imported from 15-CURRENT included features not implemented
in FreeBSD 13 and 14. #ifdef them out.

Fixes:		995f5b9b0e4d
PR:		285371
5cef4558c1
Cy Schubert (cy)
net/nhostapd*, security/wpa_supplicant*: Sync drivers_bsd.c from src

src/ commits to drviers_bsd.c in src have fixed a number of problems
with wpa_supplicant/hostapd and FreeBSD. Bring those changes into the
ports.

PR:		285371
Tested by:	Matthias Apitz <guru@unixarea.de>
MFH		2025Q1
995f5b9b0e
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account.
8718d5cd12
Cy Schubert (cy)
net/hostapd-devel: Refetch distfile

Fixes:	fdaa4d114bf2
528259eb79
Cy Schubert (cy)
net/hostapd-devel: Fix commit date

Fixes:	241787028bfa
fdaa4d114b
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account.
241787028b
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account.
f38dd26861
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account.
06f6d32e63
Cy Schubert (cy)
net/hostapd-devel: Sync driver_bsd.c with base system

Replace driver_bsd.c with the one from src. It utilizes facilities
and features already in FreeBSD.
d2399d0b08
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account.
1d0a9a7192
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account.
00069b087b
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account.
2509c7f3e7
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account.
38b8db5089
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account.
d956f75e78
Cy Schubert (cy)
net/hostapd-devel: Fix 15-CURRENT 108de784513d build

On FreeBSD systems without 108de784513d the old definition will be used
while on 108de784513d and newer the duplicate case will be removed.

Obtained from:	src 676041c41ba5
Discussed with:	imp
9b3a778da5
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account.
e4ea758524
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account.
0f98a441df
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account.
0cc4ef1444
Cy Schubert (cy)
net/hostapd*: Work around lack of MLME support

hostap MLME uses Linux data structures and definitions not available
in FreeBSD. The ability for hostapd to select the frequency (channel)
depends Linux MLME, though strictly it's not required. Work around the
Linux MLME requirement to configure device frequency.

The detailed description is: hostapd will only set the channel (frequency)
when Linux MLME is configured. Enabling NEED_AP_MLME will result in
numerous build errors due do Linux data structures and definitions not
available under FreeBSD. The code to set the frequency from the selected
channel is only within the NEED_AP_MLME code path because without MLME,
hostapd_get_hw_features() is an inline that always returns -1 whereas with
MLME hostapd_get_hw_features() will obtain hardware features from the
kernel. Until such time we simply set the frequency as configured.

PR:		276375
MFH:		2024Q1
2dc822b9e7
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account.
07c8d8577b
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account.
85160acfac
Muhammad Moinur Rahman (bofh)
net/hostapd-devel: Sanitize MANPREFIX

Approved by:    portmgr (blanket)
b5228942cd
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account.
34af590f7c
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account.
311cf05b5e
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account.
9ecd0daabf
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account.
42ad49fd15
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account.
80919a037c
Cy Schubert (cy)
net/hostapd-devel: Update to the latest GH commit

Update to the latest w1.fi commit, proxied through my GH account.
dd55881662
Cy Schubert (cy)
net/hostapd-devel: wpa: Enable receiving priority tagged (VID 0) frames

Certain internet service providers transmit vlan 0 priority tagged
EAPOL frames from the ONT towards the residential gateway. VID 0
should be ignored, and the frame processed according to the priority
set in the 802.1P bits and the encapsulated EtherType (i.e. EAPOL).

The pcap filter utilized by l2_packet is inadquate for this use case.

Here we modify the pcap filter to accept both unencapsulated and
encapsulated (with VLAN 0) EAPOL EtherTypes. This preserves the
original filter behavior while also matching on encapsulated EAPOL.

Sponsored by:   Rubicon Communications, LLC ("Netgate")
Reviewed by:    cy
Obtained from:	src bb5d6d14d81b
PR:             273696
MFH:		2023Q3
92b2d8e1bf
Cy Schubert (cy)
net/hostapd-devel: Fix uninitialized packet pointer on error

The packet pointer (called packet) will remain uninitialized when
pcap_next_ex() returns an error. This occurs when the wlan
interface is shut down using ifconfig destroy. Adding a NULL
assignment to packet duplicates what pcap_next() does.

The reason we use pcap_next_ex() in this instance is because with
pacp_next() when we receive a null pointer if there was an error
or if no packets were read. With pcap_next_ex() we can differentiate
between an error and legitimately no packets were received.

PR:             270649, 273696
Obtained from:	src 953efa5b200f
Reported by:    Robert Morris <rtm@lcs.mit.edu>
MFH:		2023Q3
2150c312db
Cy Schubert (cy)
net/hostapd-devel: Rename patch to current patch naming standard
1da2ce685a
page 1 of 3older →oldest »