FEDORA-2015-13844 — enhancement update for freeradius

stable

freeradius-3.0.9-1.fc22

FEDORA-2015-13844 created by nkondras 9 years ago for Fedora 22

Upgrade FreeRADIUS packages to v3.0.9 upstream release.

This fixes the following bugs:

Bug 1248894 - freeradius: the EAP-PWD module performs insufficient validation on packets received from an EAP peer
Bug 1234976 - CVE-2015-4680 freeradius: insufficent CRL application

Note that this release changes extensions of the installed SNMP MIB files from .txt to .mib.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2015-13844

This update has been submitted for testing by nkondras.

9 years ago

This update has been pushed to testing

9 years ago

westford commented & provided feedback 9 years ago

karma

I use a different non-root group and user for freeradius than what is in the rpm. It would be nice if the rpm did not try to set it back to its user / group. Other than that, it is working under light load using EAP-TLS.

This update has reached 47 days in testing and can be pushed to stable now if the maintainer wishes

9 years ago

westford commented 9 years ago

3.0.10 is considered stable by freeradius.org.

This update has been submitted for stable by nkondras.

9 years ago

This update has been pushed to stable.

9 years ago