Bug 72012 - [maintainer-update] security update for net/freeradius
Summary: [maintainer-update] security update for net/freeradius
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: Normal Affects Only Me
Assignee: Pav Lucistnik
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2004-09-22 21:40 UTC by Andrew Thompson
Modified: 2004-09-26 00:40 UTC (History)
0 users

See Also:

Attachments
file.diff (771 bytes, patch)
2004-09-22 21:40 UTC, Andrew Thompson 		no flags Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Andrew Thompson 2004-09-22 21:40:19 UTC 
Update to 1.0.1 for the following bug-fixes. (no functionality changes)

*Please commit before 5.3*


Denial-of-Service Security Fix
* Fix two remote crashes and a memory leak in RADIUS packet
  decoding.

Bug fixes.
* Fix premature "success" during EAP/TLS handshake.
* Dictionary handling now complains about identically named
  values with different values, and rejects dictionary
  entries with bad data
* Update dictionaries to deal with the above change.

How-To-Repeat: 	<code/input/activities to reproduce the problem (multiple lines)>
Comment 1 Pav Lucistnik freebsd_committer freebsd_triage 2004-09-26 00:08:00 UTC 
Responsible Changed
From-To: freebsd-ports-bugs->pav

Poke
Comment 2 Pav Lucistnik freebsd_committer freebsd_triage 2004-09-26 00:40:26 UTC 
State Changed
From-To: open->closed

Committed, thanks1