-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 22 Apr 2019 23:23:36 +0200 Source: freeradius Architecture: source Version: 3.0.17+dfsg-1.1 Distribution: unstable Urgency: high Maintainer: Debian FreeRADIUS Packaging Team <pkg-freeradius-maintainers@lists.alioth.debian.org> Changed-By: Bernhard Schmidt <berni@debian.org> Closes: 926958 Changes: freeradius (3.0.17+dfsg-1.1) unstable; urgency=high . * Non-maintainer upload. * Cherry-Pick upstream commits to fix CVE-2019-11234 / CVE-2019-11235 / VU#871675 (Invalid Curve Attack and Reflection Attack on EAP-PWD, leading to authentication bypass) (Closes: #926958) Checksums-Sha1: 6dc2174ea6db4fadd7fd8bcfce44d2e9e109cf31 3818 freeradius_3.0.17+dfsg-1.1.dsc 96316f800b19d9fefa163a29bfcf451ae5ceaea5 63832 freeradius_3.0.17+dfsg-1.1.debian.tar.xz 2b9c90ca043f46c04ae942efd408330676fe5ada 19233 freeradius_3.0.17+dfsg-1.1_amd64.buildinfo Checksums-Sha256: e25c2c7483328e3b2b6bf01188493ac60d6ba1790a7f119a33427876636e0943 3818 freeradius_3.0.17+dfsg-1.1.dsc 70c32f02cf7878b03b748825eb1c4b625e1935c93fbc9a7ad6550b5bc0d0f273 63832 freeradius_3.0.17+dfsg-1.1.debian.tar.xz e287282ba2ab945fdf06c6280549370b733b3c9ff1d64fec6f251e52f6bc80e8 19233 freeradius_3.0.17+dfsg-1.1_amd64.buildinfo Files: d9c1e5636ebbbe0d8612dfc3716a8ad5 3818 net optional freeradius_3.0.17+dfsg-1.1.dsc e69edc14d18672215c22fe13408caba2 63832 net optional freeradius_3.0.17+dfsg-1.1.debian.tar.xz 56ef52b0d1de4d7ab9058efbb8cba26c 19233 net optional freeradius_3.0.17+dfsg-1.1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJFBAEBCgAvFiEE1uAexRal3873GVbTd1B55bhQvJMFAly+NPsRHGJlcm5pQGRl Ymlhbi5vcmcACgkQd1B55bhQvJNqJw//dHovzbcYPfGsY3lu7M4/PJVuL9HATPhq 5h4nneqwXrJyai+farBlALuDrEYmKE5VLb/lzn0ozfdqozGD0gJY9WnQ5NV9pTkS GtTHNIfCLgScsIbohsIgl7cdagsgaK7dG4ALts5glGkNKHeZkfJy2xh8Oz/XTCNO 6uq23TRSH2MFw1X8t5zPd2KyRVANTnIRW3LmZwO13aiw/l7MibMyB3OIjTNkYpfE mI1l18RUm9N5v2GnougnvpSMOtUgkKLzqGhezeEcqXtAHtu7R+gndtExArT0gOtX OedYg8dcnLPOIZJDi/fr3/gUBgvVTEX7QJCQFfWQjWCI4xdppo9Ls1drtoxNRFxG 78MIJU9RBG1GMRe8KrGZbnrb9sGE94uzw8UCA8LnYEdp2ig+qVeGIVkHmOwEsKK3 eMSO67LumesMrBh6HwHpHX0pcYaFgljMVYGJCew8G8Z6wc5ZL4wacPWKYfqHTkSP LKuROl85xVoK3hsHtdzZi0kYMlxlSMow5G7lbUqqUzghYamKHOjkFeA7csk2GP05 8JGhQdF9f5mTtkVJthPODy/ER291jZqAjzhAFhU0Ss6JGTp7LCgytTokELR2PxFi I3+maCIzrW9ubWHKJDztHOR6w30JMnvvg20p8ffghMGIQGaoBjEvuEKArt8BODhJ HdhdLVjHB6A= =kiDm -----END PGP SIGNATURE-----