Go to file
Yi Zhao cd15081a7c freeradius: Security fixes for CVE-2022-41860 CVE-2022-41861
CVE-2022-41860:
In freeradius, when an EAP-SIM supplicant sends an unknown SIM option,
the server will try to look that option up in the internal dictionaries.
This lookup will fail, but the SIM code will not check for that failure.
Instead, it will dereference a NULL pointer, and cause the server to
crash.

CVE-2022-41861:
A flaw was found in freeradius. A malicious RADIUS client or home server
can send a malformed abinary attribute which can cause the server to
crash.

References:
https://nvd.nist.gov/vuln/detail/CVE-2022-41860
https://nvd.nist.gov/vuln/detail/CVE-2022-41861

Patches from:
CVE-2022-41860:
f1cdbb33ec

CVE-2022-41861:
0ec2b39d26

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-02-11 11:08:44 -05:00
contrib pw-am.sh: update to new patcwork system 2022-02-28 08:39:26 -08:00
meta-filesystems aufs-util: Fix build with large file support enabled systems 2022-12-20 10:34:28 -05:00
meta-gnome gnome-text-editor: Add missing libpcre build time depenedency 2022-11-25 10:48:25 -05:00
meta-initramfs meta-openemnedded: Add myself as langdale maintainer 2022-10-22 15:59:34 -07:00
meta-multimedia fluidsynth: update SRC_URI to remove non-existing 2.2.x branch 2023-01-21 10:13:46 -05:00
meta-networking freeradius: Security fixes for CVE-2022-41860 CVE-2022-41861 2023-02-11 11:08:44 -05:00
meta-oe nss: fix cross-compilation error 2023-02-11 10:50:24 -05:00
meta-perl meta-openemnedded: Add myself as langdale maintainer 2022-10-22 15:59:34 -07:00
meta-python python3-pillow: Add distutils, unixadmin for ptest 2023-02-11 10:50:32 -05:00
meta-webserver monkey: use git fetcher 2022-11-12 14:49:08 -05:00
meta-xfce xfce4-verve-plugin: fix do_configure faiure about missing libpcre 2022-11-25 10:48:09 -05:00
.gitignore .gitignore: add *.pyc and *.pyo 2019-06-15 16:45:33 -07:00
COPYING.MIT add README and license for this layer 2011-02-13 16:47:32 +01:00
README meta-openemnedded: Add myself as langdale maintainer 2022-10-22 15:59:34 -07:00

Collection of layers for the OE-core universe

Main layer maintainer: Armin Kuster <akuster808@gmail.com>

This repository is a collection of layers to suppliment OE-Core
with additional packages, Each layer have designated maintainer
Please see the respective READMEs in the layer subdirectories