freeradius 3.0.12+dfsg-4ubuntu1.2 source package in Ubuntu

Changelog

freeradius (3.0.12+dfsg-4ubuntu1.2) zesty-security; urgency=medium

  * SECURITY UPDATE: read/write overflow in make_secret()
    - debian/patches/CVE-2017-10978.patch: check lengths in
      src/lib/radius.c.
    - CVE-2017-10978
  * SECURITY UPDATE: read overflow when decoding option 63
    - debian/patches/CVE-2017-10983.patch: decode correct option in
      src/modules/proto_dhcp/dhcp.c.
    - CVE-2017-10983
  * SECURITY UPDATE: write overflow in data2vp_wimax()
    - debian/patches/CVE-2017-10984-1.patch: handle malformed attributes in
      src/lib/radius.c, added test to src/tests/unit/wimax.txt.
    - debian/patches/CVE-2017-10984-2.patch: simplify code in
      src/lib/radius.c, added test to src/tests/unit/extended.txt.
    - CVE-2017-10984
  * SECURITY UPDATE: infinite loop and memory exhaustion with 'concat'
    attributes
    - debian/patches/CVE-2017-10985.patch: fix checks in src/lib/radius.c,
      added test to src/tests/unit/rfc.txt.
    - CVE-2017-10985
  * SECURITY UPDATE: infinite read in dhcp_attr2vp()
    - debian/patches/CVE-2017-10986.patch: fix loop in
      src/modules/proto_dhcp/dhcp.c.
    - CVE-2017-10986
  * SECURITY UPDATE: Buffer over-read in fr_dhcp_decode_suboptions()
    - debian/patches/CVE-2017-10987.patch: check for room in
      src/modules/proto_dhcp/dhcp.c.
    - CVE-2017-10987

 -- Marc Deslauriers <email address hidden>  Wed, 26 Jul 2017 10:23:14 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Zesty
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
net
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
freeradius_3.0.12+dfsg.orig.tar.gz 3.6 MiB 07e158ed9d15bf6e1f20cf70c7dce7d54f3218ad3e022b92c3a6a8e414834c17
freeradius_3.0.12+dfsg-4ubuntu1.2.debian.tar.xz 74.1 KiB 447c17a5b99e9ecf29ff172c9669f1ca022c10349cc9a7e2999b0f5ee11b10c7
freeradius_3.0.12+dfsg-4ubuntu1.2.dsc 3.7 KiB 64a78f9869f6c18638f5e00f1f3d452997586d1366fffa6434caf2a341b5e330

View changes file

Binary packages built by this source

freeradius: No summary available for freeradius in ubuntu zesty.

No description available for freeradius in ubuntu zesty.

freeradius-common: No summary available for freeradius-common in ubuntu zesty.

No description available for freeradius-common in ubuntu zesty.

freeradius-config: No summary available for freeradius-config in ubuntu zesty.

No description available for freeradius-config in ubuntu zesty.

freeradius-dbgsym: No summary available for freeradius-dbgsym in ubuntu zesty.

No description available for freeradius-dbgsym in ubuntu zesty.

freeradius-dhcp: No summary available for freeradius-dhcp in ubuntu zesty.

No description available for freeradius-dhcp in ubuntu zesty.

freeradius-dhcp-dbgsym: No summary available for freeradius-dhcp-dbgsym in ubuntu zesty.

No description available for freeradius-dhcp-dbgsym in ubuntu zesty.

freeradius-iodbc: No summary available for freeradius-iodbc in ubuntu zesty.

No description available for freeradius-iodbc in ubuntu zesty.

freeradius-iodbc-dbgsym: No summary available for freeradius-iodbc-dbgsym in ubuntu zesty.

No description available for freeradius-iodbc-dbgsym in ubuntu zesty.

freeradius-krb5: No summary available for freeradius-krb5 in ubuntu zesty.

No description available for freeradius-krb5 in ubuntu zesty.

freeradius-krb5-dbgsym: No summary available for freeradius-krb5-dbgsym in ubuntu zesty.

No description available for freeradius-krb5-dbgsym in ubuntu zesty.

freeradius-ldap: No summary available for freeradius-ldap in ubuntu zesty.

No description available for freeradius-ldap in ubuntu zesty.

freeradius-ldap-dbgsym: No summary available for freeradius-ldap-dbgsym in ubuntu zesty.

No description available for freeradius-ldap-dbgsym in ubuntu zesty.

freeradius-memcached: No summary available for freeradius-memcached in ubuntu zesty.

No description available for freeradius-memcached in ubuntu zesty.

freeradius-memcached-dbgsym: No summary available for freeradius-memcached-dbgsym in ubuntu zesty.

No description available for freeradius-memcached-dbgsym in ubuntu zesty.

freeradius-mysql: No summary available for freeradius-mysql in ubuntu zesty.

No description available for freeradius-mysql in ubuntu zesty.

freeradius-mysql-dbgsym: No summary available for freeradius-mysql-dbgsym in ubuntu zesty.

No description available for freeradius-mysql-dbgsym in ubuntu zesty.

freeradius-postgresql: No summary available for freeradius-postgresql in ubuntu zesty.

No description available for freeradius-postgresql in ubuntu zesty.

freeradius-postgresql-dbgsym: No summary available for freeradius-postgresql-dbgsym in ubuntu zesty.

No description available for freeradius-postgresql-dbgsym in ubuntu zesty.

freeradius-redis: No summary available for freeradius-redis in ubuntu zesty.

No description available for freeradius-redis in ubuntu zesty.

freeradius-redis-dbgsym: No summary available for freeradius-redis-dbgsym in ubuntu zesty.

No description available for freeradius-redis-dbgsym in ubuntu zesty.

freeradius-rest: No summary available for freeradius-rest in ubuntu zesty.

No description available for freeradius-rest in ubuntu zesty.

freeradius-rest-dbgsym: No summary available for freeradius-rest-dbgsym in ubuntu zesty.

No description available for freeradius-rest-dbgsym in ubuntu zesty.

freeradius-utils: No summary available for freeradius-utils in ubuntu zesty.

No description available for freeradius-utils in ubuntu zesty.

freeradius-utils-dbgsym: No summary available for freeradius-utils-dbgsym in ubuntu zesty.

No description available for freeradius-utils-dbgsym in ubuntu zesty.

freeradius-yubikey: No summary available for freeradius-yubikey in ubuntu zesty.

No description available for freeradius-yubikey in ubuntu zesty.

freeradius-yubikey-dbgsym: No summary available for freeradius-yubikey-dbgsym in ubuntu zesty.

No description available for freeradius-yubikey-dbgsym in ubuntu zesty.

libfreeradius-dev: No summary available for libfreeradius-dev in ubuntu zesty.

No description available for libfreeradius-dev in ubuntu zesty.

libfreeradius3: No summary available for libfreeradius3 in ubuntu zesty.

No description available for libfreeradius3 in ubuntu zesty.

libfreeradius3-dbgsym: No summary available for libfreeradius3-dbgsym in ubuntu zesty.

No description available for libfreeradius3-dbgsym in ubuntu zesty.