Hello Team,

freeradius.org  releases  vulnerability notifications for all versions of
FreeRADIUS from 0.9.3 to 3.0.25   :

https://freeradius.org/security/
2022.04.22 - Information leakage in EAP-PWD: The issue was fixed in commit
9e5e8f2f <https://github.com/FreeRADIUS/freeradius-server/commit/9e5e8f2f>.
2022.04.22 - Crash on unknown option in EAP-SIM: The issue was fixed in commit
f1cdbb
<https://github.com/FreeRADIUS/freeradius-server/commit/f1cdbb33ec61c4a64a>
2022.04.22 - Crash on invalid abinary data: The issue was fixed in commit
0ec2b39
<https://github.com/FreeRADIUS/freeradius-server/commit/0ec2b39d260e>.

PacketFence v10.3   is running  freeradius-3.0.21
PacketFence v11.2   is running  freeradius-3.0.25

How to fix these issues ?
Freeradius version 3.2.0 has been released.
Is there any plan to upgrade to freeradius 3.2.0?

Thanks,

Kind regards
Mickael BOUBALA
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to