18 Jul
2017
18 Jul
'17
3:46 a.m.
Hi Alan, On 07/17/2017 04:13 PM, Alan DeKok wrote:
Guido Vranken found some issues with OpenVPN, so I asked him to look at FreeRADIUS. The good news is we're releasing new versions of the server. The bad news is he found things:
http://freeradius.org/security/fuzzer-2017.html
The various vendors have already been notified, and should have patches ready.
Thanks a lot for your work on handling these vulnerabilities. I'm working on rebasing Fedora to 3.0.15 and noticed one thing: the contents of the tarball doesn't match the tag in Git. Have you forgotten to push a commit per chance? Thanks! Nick