wpa (2.4-0ubuntu6.8+esm1) xenial-security; urgency=medium

  With this release, wpa_supplicant enforces stricter security by only loading
  shared objects for opensc_engine_path, pkcs11_engine_path, and
  pkcs11_module_path if they are located within the /usr/lib directory. If any
  shared object is outside this trusted path, wpa_supplicant will refuse to load
  it and log an error:

    ENGINE: Failed to load OpenSC Engine from **: Not in trusted path /usr/lib/

  To comply with this new security measure, ensure that the shared objects
  (actual files, not symlinks) specified in your wpa_supplicant configuration
  are copied to any directory within /usr/lib. Update the configuration paths
  accordingly. 

 -- Sudhakar Verma <sudhakar.verma@canonical.com>  Mon, 05 Aug 2024 16:55:11 +0530

wpasupplicant (0.6.2-1) unstable; urgency=low

  The -w (wait for network interface to exist) command line option no longer
  exists. If you have scripts that require this option, it is time to change
  them, or use one of the two supported modes of operation explained at
  /usr/share/doc/wpasupplicant/README.modes.gz.

  ifupdown supports hot-plugged network devices via the "allow-hotplug" class
  of operation. An example /etc/network/interfaces configuration stanza would
  look like:

  allow-hotplug wlan0
  iface wlan0 inet dhcp
          wpa-ssid myssid
          wpa-psk mysecretpassphrase

  network-manager is also able to handle hot-plugged network devices.

 -- Kel Modderman <kel@otaku42.de>  Mon, 14 Jan 2008 18:02:17 +1000

