Hello Team, freeradius.org releases vulnerability notifications for all versions of FreeRADIUS from 0.9.3 to 3.0.25 :
https://freeradius.org/security/ 2022.04.22 - Information leakage in EAP-PWD: The issue was fixed in commit 9e5e8f2f <https://github.com/FreeRADIUS/freeradius-server/commit/9e5e8f2f>. 2022.04.22 - Crash on unknown option in EAP-SIM: The issue was fixed in commit f1cdbb <https://github.com/FreeRADIUS/freeradius-server/commit/f1cdbb33ec61c4a64a> 2022.04.22 - Crash on invalid abinary data: The issue was fixed in commit 0ec2b39 <https://github.com/FreeRADIUS/freeradius-server/commit/0ec2b39d260e>. PacketFence v10.3 is running freeradius-3.0.21 PacketFence v11.2 is running freeradius-3.0.25 How to fix these issues ? Freeradius version 3.2.0 has been released. Is there any plan to upgrade to freeradius 3.2.0? Thanks, Kind regards Mickael BOUBALA
_______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users