diff options
| author | Yi Zhao <yi.zhao@windriver.com> | 2024-11-21 19:03:28 +0800 |
|---|---|---|
| committer | Armin Kuster <akuster808@gmail.com> | 2024-11-24 17:38:31 -0500 |
| commit | b8d1a14f7f3b76457c36752202ea7ae5881b6654 (patch) | |
| tree | 7b6c2c410ac2b5f7c653f001c81140b3e22ccb57 /meta-networking/recipes-connectivity | |
| parent | 83d23d2b24fde3d4d6173e4c23d3683f27e5a951 (diff) | |
| download | meta-openembedded-b8d1a14f7f3b76457c36752202ea7ae5881b6654.tar.gz | |
freeradius: upgrade 3.2.3 -> 3.2.5
ChangeLog:
https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_4
https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_5
Security fixes:
CVE-2024-3596:
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a
local attacker who can modify any valid Response (Access-Accept,
Access-Reject, or Access-Challenge) to any other response using a
chosen-prefix collision attack against MD5 Response Authenticator
signature.
Reference:
https://nvd.nist.gov/vuln/detail/CVE-2024-3596
https://www.freeradius.org/security/
https://www.blastradius.fail/
https://www.inkbridgenetworks.com/web/content/2557?unique=47be02c8aed46c53b0765db185320249ad873d95
(master rev: 28d82d17c8174ee17271ca43ad7eb2175211cacc)
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Haixiao Yan <haixiao.yan.cn@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Diffstat (limited to 'meta-networking/recipes-connectivity')
| -rw-r--r-- | meta-networking/recipes-connectivity/freeradius/freeradius_3.2.5.bb (renamed from meta-networking/recipes-connectivity/freeradius/freeradius_3.2.3.bb) | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/meta-networking/recipes-connectivity/freeradius/freeradius_3.2.3.bb b/meta-networking/recipes-connectivity/freeradius/freeradius_3.2.5.bb index 7ea63a65d3..70f2496170 100644 --- a/meta-networking/recipes-connectivity/freeradius/freeradius_3.2.3.bb +++ b/meta-networking/recipes-connectivity/freeradius/freeradius_3.2.5.bb | |||
| @@ -39,7 +39,7 @@ SRC_URI = "git://github.com/FreeRADIUS/freeradius-server.git;branch=v3.2.x;lfs=0 | |||
| 39 | 39 | ||
| 40 | raddbdir = "${sysconfdir}/${MLPREFIX}raddb" | 40 | raddbdir = "${sysconfdir}/${MLPREFIX}raddb" |
| 41 | 41 | ||
| 42 | SRCREV = "db3d1924d9a2e8d37c43872932621f69cfdbb099" | 42 | SRCREV = "a7acce80f5ba2271d9aeb737a4a91a5bf8317f31" |
| 43 | 43 | ||
| 44 | UPSTREAM_CHECK_GITTAGREGEX = "release_(?P<pver>\d+(\_\d+)+)" | 44 | UPSTREAM_CHECK_GITTAGREGEX = "release_(?P<pver>\d+(\_\d+)+)" |
| 45 | 45 | ||