From a6ce2fc6c7c21d232175f535d3128349bcd2d784 Mon Sep 17 00:00:00 2001 From: "Alan T. DeKok" Date: Fri, 26 May 2017 14:11:20 -0400 Subject: [PATCH] note recent updates --- doc/ChangeLog | 3 +++ 1 file changed, 3 insertions(+) diff --git a/doc/ChangeLog b/doc/ChangeLog index 337bffb..a26a7d1 100644 --- a/doc/ChangeLog +++ b/doc/ChangeLog @@ -2,6 +2,7 @@ FreeRADIUS 3.0.14 Mon 06 Mar 2017 13:00:00 EDT urgency=medium Feature improvements * Enforce TLS client certificate expiration on session resumption, and Session-Timeout. + See CVE-2017-9148. * Updated dictionary.cisco.vpn3000, dictionary.patton * Added dictionary.dellemc * Lowered the log output for failed PEAP sessions. @@ -47,6 +48,8 @@ FreeRADIUS 3.0.14 Mon 06 Mar 2017 13:00:00 EDT urgency=medium * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us a test license. Please see the git commit history for more information. + * Fix incorrect length check in EAP-PWD. This may + be exploitable. FreeRADIUS 3.0.13 Mon 06 Mar 2017 13:00:00 EDT urgency=medium Feature improvements -- 2.1.4