Preparations for v2.8 release

Update the version number for the build and also add the ChangeLog
entries for both hostapd and wpa_supplicant to describe main changes
between v2.7 and v2.8.

Signed-off-by: Jouni Malinen <j@w1.fi>

diff --git a/doc/doxygen.conf b/doc/doxygen.conf
index a5b1fa5036c6ae88e0193512e8e0da57cf8cc29a..cf2879010344732fe2850d23fe52a70ef239bded 100644 (file)
--- a/doc/doxygen.conf
+++ b/doc/doxygen.conf
@@ -31,7 +31,7 @@ PROJECT_NAME           = "wpa_supplicant / hostapd"
 # This could be handy for archiving the generated documentation or
 # if some version control system is used.
 
-PROJECT_NUMBER         = 2.8
+PROJECT_NUMBER         = 2.9
 
 # The OUTPUT_DIRECTORY tag is used to specify the (relative or absolute)
 # base path where the generated documentation will be put.

diff --git a/hostapd/ChangeLog b/hostapd/ChangeLog
index 327ee3b46ede07590f9864fbad5a8a5237d1a0e7..6c4410e8ec623d020d9bca0166924722bb2e2ad1 100644 (file)
--- a/hostapd/ChangeLog
+++ b/hostapd/ChangeLog
@@ -1,5 +1,29 @@
 ChangeLog for hostapd
 
+2019-08-07 - v2.9
+       * SAE changes
+         - disable use of groups using Brainpool curves
+         - improved protection against side channel attacks
+         [https://w1.fi/security/2019-6/]
+       * EAP-pwd changes
+         - disable use of groups using Brainpool curves
+         - improved protection against side channel attacks
+         [https://w1.fi/security/2019-6/]
+       * fixed FT-EAP initial mobility domain association using PMKSA caching
+       * added configuration of airtime policy
+       * fixed FILS to and RSNE into (Re)Association Response frames
+       * fixed DPP bootstrapping URI parser of channel list
+       * added support for regulatory WMM limitation (for ETSI)
+       * added support for MACsec Key Agreement using IEEE 802.1X/PSK
+       * added experimental support for EAP-TEAP server (RFC 7170)
+       * added experimental support for EAP-TLS server with TLS v1.3
+       * added support for two server certificates/keys (RSA/ECC)
+       * added AKMSuiteSelector into "STA <addr>" control interface data to
+         determine with AKM was used for an association
+       * added eap_sim_id parameter to allow EAP-SIM/AKA server pseudonym and
+         fast reauthentication use to be disabled
+       * fixed an ECDH operation corner case with OpenSSL
+
 2019-04-21 - v2.8
        * SAE changes
          - added support for SAE Password Identifier

diff --git a/src/common/version.h b/src/common/version.h
index 031d1bee85a59945b12acf5ee7c1582f03a13a76..c2a3a80d7f718f999a1a860133d20ec47f95ba22 100644 (file)
--- a/src/common/version.h
+++ b/src/common/version.h
@@ -9,6 +9,6 @@
 #define GIT_VERSION_STR_POSTFIX ""
 #endif /* GIT_VERSION_STR_POSTFIX */
 
-#define VERSION_STR "2.9-devel" VERSION_STR_POSTFIX GIT_VERSION_STR_POSTFIX
+#define VERSION_STR "2.9" VERSION_STR_POSTFIX GIT_VERSION_STR_POSTFIX
 
 #endif /* VERSION_H */

diff --git a/wpa_supplicant/ChangeLog b/wpa_supplicant/ChangeLog
index 89119e7bd18fa69e8c34f5cabe9d9a2f4c81999b..f82e5e0ea5df11876784119c2a8a5a86b886ae00 100644 (file)
--- a/wpa_supplicant/ChangeLog
+++ b/wpa_supplicant/ChangeLog
@@ -1,5 +1,34 @@
 ChangeLog for wpa_supplicant
 
+2019-08-07 - v2.9
+       * SAE changes
+         - disable use of groups using Brainpool curves
+         - improved protection against side channel attacks
+         [https://w1.fi/security/2019-6/]
+       * EAP-pwd changes
+         - disable use of groups using Brainpool curves
+         - allow the set of groups to be configured (eap_pwd_groups)
+         - improved protection against side channel attacks
+         [https://w1.fi/security/2019-6/]
+       * fixed FT-EAP initial mobility domain association using PMKSA caching
+         (disabled by default for backwards compatibility; can be enabled
+         with ft_eap_pmksa_caching=1)
+       * fixed a regression in OpenSSL 1.1+ engine loading
+       * added validation of RSNE in (Re)Association Response frames
+       * fixed DPP bootstrapping URI parser of channel list
+       * extended EAP-SIM/AKA fast re-authentication to allow use with FILS
+       * extended ca_cert_blob to support PEM format
+       * improved robustness of P2P Action frame scheduling
+       * added support for EAP-SIM/AKA using anonymous@realm identity
+       * fixed Hotspot 2.0 credential selection based on roaming consortium
+         to ignore credentials without a specific EAP method
+       * added experimental support for EAP-TEAP peer (RFC 7170)
+       * added experimental support for EAP-TLS peer with TLS v1.3
+       * fixed a regression in WMM parameter configuration for a TDLS peer
+       * fixed a regression in operation with drivers that offload 802.1X
+         4-way handshake
+       * fixed an ECDH operation corner case with OpenSSL
+
 2019-04-21 - v2.8
        * SAE changes
          - added support for SAE Password Identifier