> apt-listchanges: News
---------------------
wpa (2:2.4-1+deb9u3) stretch-security; urgency=high
This release backports changes to help mitigate EAP-pwd security issues
(CVE-2019-9495, CVE-2019-9497, CVE-2019-9498, CVE-2019-9499).
Unfortunately, the complete fix heavily depends on the code added after
wpa 2.4 release, so porting it is not practical. Consider using strong
passwords to prevent dictionary attacks.
For more information about the issues and their impace, see the Debian
Security Advisory DSA-4430-1.