Version 3.0.15 and 2.2.10 have been released.
Brian Julin
BJulin at clarku.edu
Mon Jul 17 16:19:11 CEST 2017
Alan DeKok wrote:
> Guido Vranken found some issues with OpenVPN, so I asked him to look at FreeRADIUS. The good news is we're releasing new versions of the server. The bad news is he found things:
> http://freeradius.org/security/fuzzer-2017.html
Thank you for the diligence and heads up.
Question: Of the bugs affecting RADIUS protocol itself, it looks like they apply to
some attributes that to many of us would be considered esoteric... is an attribute
filter going to kill those before the affected code gets hit, or not?
More information about the Freeradius-Users
mailing list