Date: Fri, 10 Jun 2005 17:21:09 +0900 (JST) From: endou@the.ne.jp To: FreeBSD-gnats-submit@FreeBSD.org Subject: ports/82100: [ports] freeradius security fix Message-ID: <20050610082109.5783EF279@chamomile.the.ne.jp> Resent-Message-ID: <200506100830.j5A8U9X8085452@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 82100 >Category: ports >Synopsis: freeradius security fix >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Fri Jun 10 08:30:09 GMT 2005 >Closed-Date: >Last-Modified: >Originator: endou >Release: FreeBSD 5.4-RELEASE-p1 i386 >Organization: the.ne.jp >Environment: System: FreeBSD rose.the.ne.jp 5.4-RELEASE-p1 FreeBSD 5.4-RELEASE-p1 #12: Tue Jun 7 14:54:44 JST 2005 root@rose.the.ne.jp:/usr/obj/usr/src/sys/THE i386 >Description: freeradius-1.0.2 has security hole. and freeradius-1.0.3 is fix. ports base version change 1.0.2 to 1.0.3 >How-To-Repeat: http://www.FreeBSD.org/ports/portaudit/2fbe16c2-cab6-11d9-9aed-000e0c2e438a.html >Fix: patch blow begin 644 patch-freeradius M9&EF9B`M=7(@9G)E97)A9&EU<R]-86ME9FEL92!F<F5E<F%D:75S+3$N,"XS M+TUA:V5F:6QE"BTM+2!F<F5E<F%D:75S+TUA:V5F:6QE"49R:2!*=6X@(#,@ M,34Z,S$Z,#`@,C`P-0HK*RL@9G)E97)A9&EU<RTQ+C`N,R]-86ME9FEL90E& M<FD@2G5N(#$P(#$V.C0T.C(V(#(P,#4*0$`@+38L."`K-BPW($!`"B`C"B`* M(%!/4E1.04U%/0EF<F5E<F%D:75S"BU03U)45D524TE/3CT),2XP+C(*+5!/ M4E12159)4TE/3CT),0HK4$]25%9%4E-)3TX]"3$N,"XS"B!#051%1T]22453 M/0EN970*($U!4U1%4E]3251%4ST)9G1P.B\O9G1P+F9R965R861I=7,N;W)G M+W!U8B]R861I=7,O(%P*(`D)9G1P.B\O9G1P+D%W9G5L:&%K+F]R9R]P=6(O M<F%D:75S+PID:69F("UU<B!F<F5E<F%D:75S+V1I<W1I;F9O(&9R965R861I M=7,M,2XP+C,O9&ES=&EN9F\*+2TM(&9R965R861I=7,O9&ES=&EN9F\)4V%T M($%P<B`Q-B`Q-SHQ.#HU."`R,#`U"BLK*R!F<F5E<F%D:75S+3$N,"XS+V1I M<W1I;F9O"49R:2!*=6X@,3`@,38Z-#,Z,3<@,C`P-0I`0"`M,2PR("LQ+#(@ M0$`*+4U$-2`H9G)E97)A9&EU<RTQ+C`N,BYT87(N9WHI(#T@9C5D9F-E-&5F M8F(P,V)B8S0W8V5A93`X,C<P83@W-64*+5-)6D4@*&9R965R861I=7,M,2XP M+C(N=&%R+F=Z*2`](#(R,#@X.#0**TU$-2`H9G)E97)A9&EU<RTQ+C`N,RYT M87(N9WHI(#T@-V9E-C<S,F9A-CEF9C0S-3%F-3%D-CDR,3)E.#EB8C8**U-) M6D4@*&9R965R861I=7,M,2XP+C,N=&%R+F=Z*2`](#(R,#<T,#$*9&EF9B`M M=7(@9G)E97)A9&EU<R]F:6QE<R]P871C:"US<F,M;6%I;BU-86ME9FEL92YI M;B!F<F5E<F%D:75S+3$N,"XS+V9I;&5S+W!A=&-H+7-R8RUM86EN+4UA:V5F M:6QE+FEN"BTM+2!F<F5E<F%D:75S+V9I;&5S+W!A=&-H+7-R8RUM86EN+4UA M:V5F:6QE+FEN"51H=2!-87D@,C8@,#4Z,C(Z,C(@,C`P-0HK*RL@9G)E97)A M9&EU<RTQ+C`N,R]F:6QE<R]P871C:"US<F,M;6%I;BU-86ME9FEL92YI;@E& M<FD@2G5N(#$P(#$V.C(X.C`Q(#(P,#4*0$`@+3$L-2`K,2PU($!`"BTM+2T@ M<W)C+VUA:6XO36%K969I;&4N:6XN;W)I9PE7960@2G5N("`R(#(P.C$W.C`V M(#(P,#0*+2LK*R!S<F,O;6%I;B]-86ME9FEL92YI;@E7960@36%Y(#$Q(#$S M.C$X.C(W(#(P,#4**RTM+2!S<F,O;6%I;B]-86ME9FEL92YI;BYO<FEG"49R M:2!-87D@,3,@,#<Z,C(Z,C8@,C`P-0HK*RLK('-R8R]M86EN+TUA:V5F:6QE M+FEN"49R:2!*=6X@,3`@,38Z,C<Z,34@,C`P-0H@0$`@+3$T+#<@*S$T+#<@ M0$`*("!#1DQ!1U,)"2L]("U$2$]35$E.1D\]7"(D>TA/4U1)3D9/?5PB"B`@ M0T9,04=3("`@("`@("`@("L]("U$4D%$25531%]615)324]./5PB)'M2041) M55-$7U9%4E-)3TY]7"(*0$`@+3,T+#$Y("LS-"PQ,B!`0`H@(`H@(')A9')E M;&%Y+F\Z(')A9')E;&%Y+F,@)"A)3D-,541%4RD*("`))"A#0RD@)"A#1DQ! M1U,I("UC(')A9')E;&%Y+F,*+4!`("TQ,S@L,3,@*S$S."PQ,R!`0`HK0$`@ M+3$S."PW("LQ,S@L-R!`0`H@(`DD*$-#*2`D*$-&3$%'4RD@+6,@<F%D=VAO M+F,*("`*+2!R861W:&\Z(')A9'=H;RYO(&UA:6YC;VYF:6<N;R!U=&EL+F\@ M;F%S+F\@8VQI96YT+F\@;&]G+F\@8V]N9F9I;&4N;R!F:6QE<RYO('AL870N M;PHM+0DD*$-#*2`D*$Q$1DQ!1U,I("UO(')A9'=H;R!R861W:&\N;R!M86EN M8V]N9FEG+F\@=71I;"YO(&YA<RYO(&-L:65N="YO(&QO9RYO(&-O;F9F:6QE M+F\@9FEL97,N;R!X;&%T+F\@)"A,24)3*0HM*PDD*$-#*2`D*$Q$1DQ!1U-? M34%)3BD@+6\@<F%D=VAO(')A9'=H;RYO(&UA:6YC;VYF:6<N;R!U=&EL+F\@ M;F%S+F\@8VQI96YT+F\@;&]G+F\@8V]N9F9I;&4N;R!F:6QE<RYO('AL870N M;R`D*$Q)0E,I"BT@"BT@<F%D>F%P+F\Z(')A9'IA<"YC("0H24Y#3%5$15,I M"BT@"20H0T,I("0H0T9,04=3*2`M8R!R861Z87`N8PHM(`HM(')A9'IA<#H@ M<F%D>F%P+F\@;6%I;F-O;F9I9RYO('5T:6PN;R!N87,N;R!L;V<N;R!C;&EE M;G0N;R!C;VYF9FEL92YO(&9I;&5S+F\@>&QA="YO"BTM"20H0T,I("0H0T9, M04=3*2`D*$Q$1DQ!1U,I("UO(')A9'IA<"!R861Z87`N;R!M86EN8V]N9FEG M+F\@=71I;"YO(&YA<RYO(&QO9RYO(&-L:65N="YO(&-O;F9F:6QE+F\@9FEL M97,N;R!X;&%T+F\@)"A,24)3*0HM*PDD*$-#*2`D*$-&3$%'4RD@)"A,1$9, M04=37TU!24XI("UO(')A9'IA<"!R861Z87`N;R!M86EN8V]N9FEG+F\@=71I M;"YO(&YA<RYO(&QO9RYO(&-L:65N="YO(&-O;F9F:6QE+F\@9FEL97,N;R!X M;&%T+F\@)"A,24)3*0HK(')A9'=H;SH@<F%D=VAO+F\@=71I;"YO(&QO9RYO M(&-O;F9F:6QE+F\@+BXO;&EB+VQI8G)A9&EU<RYL80HK+0DD*$Q)0E1/3TPI M("TM;6]D93UL:6YK("0H0T,I("0H3$1&3$%'4RD@+6\@<F%D=VAO(')A9'=H M;RYO('5T:6PN;R!L;V<N;R!C;VYF9FEL92YO("XN+VQI8B]L:6)R861I=7,N M;&$@)"A,24)3*2`D*$Q#4EE05"D**RL))"A,24)43T],*2`M+6UO9&4];&EN M:R`D*$-#*2`D*$Q$1DQ!1U-?34%)3BD@+6\@<F%D=VAO(')A9'=H;RYO('5T M:6PN;R!L;V<N;R!C;VYF9FEL92YO("XN+VQI8B]L:6)R861I=7,N;&$@)"A, M24)3*2`D*$Q#4EE05"D*("`*("!C;&5A;CH*("`)<FT@+7)F("HN;R`J+G-O 6("I^("0H0DE.05))15,I("YL:6)S"@`` ` end >Release-Note: >Audit-Trail: >Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050610082109.5783EF279>