Ubuntu
freeradius package

freeradius 1.1.0-1ubuntu2.1 source package in Ubuntu

Changelog

freeradius (1.1.0-1ubuntu2.1) dapper-security; urgency=low

  * SECURITY UPDATE: possible EAP-MSCHAPv2 authentication bypass (LP:
    #164000) and denial of service in EAP-TTLS module (LP: #106006).
  * debian/patches/20_CVE-2006-1354.dpatch: Properly validate input, to ensure
    that bad authentication requests are rejected. Patch from upstream CVS.
  * debian/patches/21_CVE-2007-2028.dpatch: Properly free VALUE_PAIR
    structures on rejected authentication, to avoid memory leaks. Patch from
    Red Hat Bugzilla.
  * References
    CVE-2006-1354
    CVE-2007-2028

 -- William Grant <email address hidden>   Tue, 20 Nov 2007 19:26:16 +1100

Upload details

Uploaded by:
William Grant
Uploaded to:
Dapper
Original maintainer:
Paul Hampson
Architectures:
any
Section:
net
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
freeradius_1.1.0.orig.tar.gz 2.0 MiB 6818c6061330cecb5b3f5cbd638f293c600fcb3f43bb679f403d30ce1a71f04d
freeradius_1.1.0-1ubuntu2.1.diff.gz 6.3 KiB cd980ada94df9a455b3e6df7fd9166314c66db19c9ac84025d14337d7c372aa4
freeradius_1.1.0-1ubuntu2.1.dsc 906 bytes e23e177894d16a66e7cafdba19bb4b941dc483cc8774b041319d5962679dc838

View changes file

Binary packages built by this source

freeradius: No summary available for freeradius in ubuntu dapper.

No description available for freeradius in ubuntu dapper.

freeradius-dialupadmin: No summary available for freeradius-dialupadmin in ubuntu dapper.

No description available for freeradius-dialupadmin in ubuntu dapper.

freeradius-iodbc: No summary available for freeradius-iodbc in ubuntu dapper.

No description available for freeradius-iodbc in ubuntu dapper.

freeradius-krb5: No summary available for freeradius-krb5 in ubuntu dapper.

No description available for freeradius-krb5 in ubuntu dapper.

freeradius-ldap: No summary available for freeradius-ldap in ubuntu dapper.

No description available for freeradius-ldap in ubuntu dapper.

freeradius-mysql: No summary available for freeradius-mysql in ubuntu dapper.

No description available for freeradius-mysql in ubuntu dapper.