http://www.s-quadra.com/advisories/Adv-20031126.txt Reproducible: Always Steps to Reproduce: 1. 2. 3.
Fix is in freeradius CVS, I am trying to get it for inclusion in our 0.9.3 ebuild. -K
Created attachment 28611 [details, diff] Fix for the rlm_smb vulnerability This is the (trivial) fix extracted from FreeRadius CVS.
Can someone from the net-dialup herd include this fix in a freeradius-0.9.3-r1 ebuild ? Thanks in advance, -K
added in freeradius-0.9.3-r1 and marked stable
Thanks Heinrich for the quick fix. Vulnerability is an old one and appears in an experimental module, compiled only if you USE=frxp. Also given the unfortunate delay in resolution, a GLSA is probably not needed for this one. Closing without GLSA. -K