Ubuntu
libpam-radius-auth package

libpam-radius-auth 1.3.17-0ubuntu3.1 source package in Ubuntu

Changelog

libpam-radius-auth (1.3.17-0ubuntu3.1) precise-security; urgency=medium

   [ Marc Deslauriers ]
   * SECURITY UPDATE: DoS via stack overflow in password field
    - debian/patches/CVE-2015-9542-1.patch: use length, which has been
      limited in size in pam_radius_auth.c.
    - debian/patches/CVE-2015-9542-2.patch: clear out trailing part of the
      buffer in pam_radius_auth.c.
    - debian/patches/CVE-2015-9542-3.patch: copy password to buffer before
      rounding length in pam_radius_auth.c.
    - debian/rules: added new patches.
    - CVE-2015-9542

 -- <email address hidden> (Leonidas S. Barbosa)  Thu, 20 Feb 2020 12:40:36 -0300

Upload details

Uploaded by:
Leonidas S. Barbosa
Uploaded to:
Precise
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Precise updates main libs
Precise security main libs

Downloads

File Size SHA-256 Checksum
libpam-radius-auth_1.3.17.orig.tar.gz 30.6 KiB 60ee863cbea797be46eff8b9d568af057c6e54335bdb19a6bd2cadde389d7dca
libpam-radius-auth_1.3.17-0ubuntu3.1.diff.gz 12.0 KiB ed0eafa7470fb009e66bb9d6a41e02cd314dfddc1e89bd398d83e710d302a7f4
libpam-radius-auth_1.3.17-0ubuntu3.1.dsc 1.8 KiB fd9fea351d51f6b5f5c3f9864b160f9e9be0af060796bfcb976eec1a333fc1e2

View changes file

Binary packages built by this source

libpam-radius-auth: The PAM RADIUS authentication module

 This is the PAM to RADIUS authentication module. It allows any PAM-capable
 machine to become a RADIUS client for authentication and accounting
 requests. You will, however, need to supply your own RADIUS server to
 perform the actual authentication

libpam-radius-auth-dbgsym: debug symbols for package libpam-radius-auth

 This is the PAM to RADIUS authentication module. It allows any PAM-capable
 machine to become a RADIUS client for authentication and accounting
 requests. You will, however, need to supply your own RADIUS server to
 perform the actual authentication