Version 3.0.15 and 2.2.10 have been released.

Brian Julin BJulin at clarku.edu
Mon Jul 17 16:19:11 CEST 2017



Alan DeKok wrote:

>  Guido Vranken found some issues with OpenVPN, so I asked him to look at FreeRADIUS.  The good news is we're releasing new versions of the server.  The bad news is he found things:
> http://freeradius.org/security/fuzzer-2017.html

Thank you for the diligence and heads up.

Question: Of the bugs affecting RADIUS protocol itself, it looks like they apply to
some attributes that to many of us would be considered esoteric... is an attribute
filter going to kill those before the affected code gets hit, or not?




More information about the Freeradius-Users mailing list