1 * Not a release blocker for jessie although the security fix
2 confirmation above certainly is. Upgrade to latest wpa_supplicant.
3 We have a procedure for doing that (subtree merge of our git master
4 branch), but we have higher priorities before the jessie freeze.