mirror of
git://git.openembedded.org/meta-openembedded
synced 2026-09-30 02:21:34 +00:00
feb3793070
ChangeLog: https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_0_27 Configuration changes: BlastRADIUS mitigations have been added to the "security" section. See require_message_authenticator and also limit_proxy_state. BlastRADIUS mitigations have been added to radclient. See man radclient, and the -b option. Security fixes: CVE-2024-3596: RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-3596 https://www.freeradius.org/security/ https://www.blastradius.fail/ https://www.inkbridgenetworks.com/web/content/2557?unique=47be02c8aed46c53b0765db185320249ad873d95 Signed-off-by: Haixiao Yan <haixiao.yan.cn@windriver.com> [Drop CVE-2024-3596 patch backported early] Signed-off-by: Armin Kuster <akuster808@gmail.com>
43 lines
1.1 KiB
Diff
43 lines
1.1 KiB
Diff
From c591da4a361496eec93625cf8c4f89bddfedaca7 Mon Sep 17 00:00:00 2001
|
|
From: Hongxu Jia <hongxu.jia@windriver.com>
|
|
Date: Sun, 7 Feb 2021 16:02:36 +0800
|
|
Subject: [PATCH] Workaround error with autoconf 2.7
|
|
|
|
While using autoconf 2.7, the AM_MISSING_PROG caused unexpected error:
|
|
...
|
|
configure.ac: error: required file 'missing' not found
|
|
...
|
|
|
|
Since these tools were explicitly added by autotools bbclass,
|
|
remove the testing to workaround the error with autoconf 2.7
|
|
|
|
Upstream-Status: Inappropriate [embedded specific]
|
|
|
|
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
|
|
---
|
|
configure.ac | 8 --------
|
|
1 file changed, 8 deletions(-)
|
|
|
|
diff --git a/configure.ac b/configure.ac
|
|
index 263098f7fd..fc296832d8 100644
|
|
--- a/configure.ac
|
|
+++ b/configure.ac
|
|
@@ -878,14 +878,6 @@ fi
|
|
|
|
AC_PATH_PROG(RUSERS, rusers, /usr/bin/rusers)
|
|
|
|
-dnl #
|
|
-dnl # FIXME This is truly gross.
|
|
-dnl #
|
|
-missing_dir=`cd $ac_aux_dir && pwd`
|
|
-AM_MISSING_PROG(ACLOCAL, aclocal, $missing_dir)
|
|
-AM_MISSING_PROG(AUTOCONF, autoconf, $missing_dir)
|
|
-AM_MISSING_PROG(AUTOHEADER, autoheader, $missing_dir)
|
|
-
|
|
AC_PATH_PROG(DIRNAME,dirname)
|
|
AC_PATH_PROG(GREP,grep)
|
|
|
|
--
|
|
2.25.1
|
|
|