From owner-freebsd-ports-bugs@FreeBSD.ORG  Fri Jun 10 08:30:10 2005
Return-Path: <owner-freebsd-ports-bugs@FreeBSD.ORG>
X-Original-To: freebsd-ports-bugs@hub.freebsd.org
Delivered-To: freebsd-ports-bugs@hub.freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 123F316A41C
	for <freebsd-ports-bugs@hub.freebsd.org>;
	Fri, 10 Jun 2005 08:30:10 +0000 (GMT)
	(envelope-from gnats@FreeBSD.org)
Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21])
	by mx1.FreeBSD.org (Postfix) with ESMTP id BCBE543D4C
	for <freebsd-ports-bugs@hub.freebsd.org>;
	Fri, 10 Jun 2005 08:30:09 +0000 (GMT)
	(envelope-from gnats@FreeBSD.org)
Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1])
	by freefall.freebsd.org (8.13.3/8.13.3) with ESMTP id j5A8U94V085456
	for <freebsd-ports-bugs@freefall.freebsd.org>;
	Fri, 10 Jun 2005 08:30:09 GMT
	(envelope-from gnats@freefall.freebsd.org)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.13.3/8.13.1/Submit) id j5A8U9X8085452;
	Fri, 10 Jun 2005 08:30:09 GMT (envelope-from gnats)
Resent-Date: Fri, 10 Jun 2005 08:30:09 GMT
Resent-Message-Id: <200506100830.j5A8U9X8085452@freefall.freebsd.org>
Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer)
Resent-To: freebsd-ports-bugs@FreeBSD.org
Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, endou@the.ne.jp
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id CCEC816A41C
	for <FreeBSD-gnats-submit@freebsd.org>;
	Fri, 10 Jun 2005 08:20:51 +0000 (GMT) (envelope-from endou@the.ne.jp)
Received: from chamomile.the.ne.jp (b131075.ppp.asahi-net.or.jp
	[202.213.131.75])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 38D5F43D4C
	for <FreeBSD-gnats-submit@freebsd.org>;
	Fri, 10 Jun 2005 08:20:50 +0000 (GMT) (envelope-from endou@the.ne.jp)
Received: by chamomile.the.ne.jp (Postfix, from userid 1002)
	id 5783EF279; Fri, 10 Jun 2005 17:21:09 +0900 (JST)
Received: from THE (localhost [127.0.0.1])
	by chamomile.the.ne.jp (Postfix) with SMTP
	id 7E207F267; Fri, 10 Jun 2005 17:20:09 +0900 (JST)
Message-Id: <20050610082109.5783EF279@chamomile.the.ne.jp>
Date: Fri, 10 Jun 2005 17:21:09 +0900 (JST)
From: endou@the.ne.jp
To: FreeBSD-gnats-submit@FreeBSD.org
X-Send-Pr-Version: 3.113
Cc: 
Subject: ports/82100: [ports] freeradius security fix
X-BeenThere: freebsd-ports-bugs@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: endou@the.ne.jp
List-Id: Ports bug reports <freebsd-ports-bugs.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports-bugs>, 
	<mailto:freebsd-ports-bugs-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ports-bugs>
List-Post: <mailto:freebsd-ports-bugs@freebsd.org>
List-Help: <mailto:freebsd-ports-bugs-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports-bugs>, 
	<mailto:freebsd-ports-bugs-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 10 Jun 2005 08:30:10 -0000


>Number:         82100
>Category:       ports
>Synopsis:       freeradius security fix
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Fri Jun 10 08:30:09 GMT 2005
>Closed-Date:
>Last-Modified:
>Originator:     endou
>Release:        FreeBSD 5.4-RELEASE-p1 i386
>Organization:
the.ne.jp
>Environment:
System: FreeBSD rose.the.ne.jp 5.4-RELEASE-p1 FreeBSD 5.4-RELEASE-p1 #12: Tue Jun 7 14:54:44 JST 2005 root@rose.the.ne.jp:/usr/obj/usr/src/sys/THE i386


>Description:
	      freeradius-1.0.2 has security hole.
and freeradius-1.0.3 is fix.
ports base version change 1.0.2 to 1.0.3
>How-To-Repeat:
	http://www.FreeBSD.org/ports/portaudit/2fbe16c2-cab6-11d9-9aed-000e0c2e438a.html

>Fix:
patch blow

begin 644 patch-freeradius
M9&EF9B`M=7(@9G)E97)A9&EU<R]-86ME9FEL92!F<F5E<F%D:75S+3$N,"XS
M+TUA:V5F:6QE"BTM+2!F<F5E<F%D:75S+TUA:V5F:6QE"49R:2!*=6X@(#,@
M,34Z,S$Z,#`@,C`P-0HK*RL@9G)E97)A9&EU<RTQ+C`N,R]-86ME9FEL90E&
M<FD@2G5N(#$P(#$V.C0T.C(V(#(P,#4*0$`@+38L."`K-BPW($!`"B`C"B`*
M(%!/4E1.04U%/0EF<F5E<F%D:75S"BU03U)45D524TE/3CT),2XP+C(*+5!/
M4E12159)4TE/3CT),0HK4$]25%9%4E-)3TX]"3$N,"XS"B!#051%1T]22453
M/0EN970*($U!4U1%4E]3251%4ST)9G1P.B\O9G1P+F9R965R861I=7,N;W)G
M+W!U8B]R861I=7,O(%P*(`D)9G1P.B\O9G1P+D%W9G5L:&%K+F]R9R]P=6(O
M<F%D:75S+PID:69F("UU<B!F<F5E<F%D:75S+V1I<W1I;F9O(&9R965R861I
M=7,M,2XP+C,O9&ES=&EN9F\*+2TM(&9R965R861I=7,O9&ES=&EN9F\)4V%T
M($%P<B`Q-B`Q-SHQ.#HU."`R,#`U"BLK*R!F<F5E<F%D:75S+3$N,"XS+V1I
M<W1I;F9O"49R:2!*=6X@,3`@,38Z-#,Z,3<@,C`P-0I`0"`M,2PR("LQ+#(@
M0$`*+4U$-2`H9G)E97)A9&EU<RTQ+C`N,BYT87(N9WHI(#T@9C5D9F-E-&5F
M8F(P,V)B8S0W8V5A93`X,C<P83@W-64*+5-)6D4@*&9R965R861I=7,M,2XP
M+C(N=&%R+F=Z*2`](#(R,#@X.#0**TU$-2`H9G)E97)A9&EU<RTQ+C`N,RYT
M87(N9WHI(#T@-V9E-C<S,F9A-CEF9C0S-3%F-3%D-CDR,3)E.#EB8C8**U-)
M6D4@*&9R965R861I=7,M,2XP+C,N=&%R+F=Z*2`](#(R,#<T,#$*9&EF9B`M
M=7(@9G)E97)A9&EU<R]F:6QE<R]P871C:"US<F,M;6%I;BU-86ME9FEL92YI
M;B!F<F5E<F%D:75S+3$N,"XS+V9I;&5S+W!A=&-H+7-R8RUM86EN+4UA:V5F
M:6QE+FEN"BTM+2!F<F5E<F%D:75S+V9I;&5S+W!A=&-H+7-R8RUM86EN+4UA
M:V5F:6QE+FEN"51H=2!-87D@,C8@,#4Z,C(Z,C(@,C`P-0HK*RL@9G)E97)A
M9&EU<RTQ+C`N,R]F:6QE<R]P871C:"US<F,M;6%I;BU-86ME9FEL92YI;@E&
M<FD@2G5N(#$P(#$V.C(X.C`Q(#(P,#4*0$`@+3$L-2`K,2PU($!`"BTM+2T@
M<W)C+VUA:6XO36%K969I;&4N:6XN;W)I9PE7960@2G5N("`R(#(P.C$W.C`V
M(#(P,#0*+2LK*R!S<F,O;6%I;B]-86ME9FEL92YI;@E7960@36%Y(#$Q(#$S
M.C$X.C(W(#(P,#4**RTM+2!S<F,O;6%I;B]-86ME9FEL92YI;BYO<FEG"49R
M:2!-87D@,3,@,#<Z,C(Z,C8@,C`P-0HK*RLK('-R8R]M86EN+TUA:V5F:6QE
M+FEN"49R:2!*=6X@,3`@,38Z,C<Z,34@,C`P-0H@0$`@+3$T+#<@*S$T+#<@
M0$`*("!#1DQ!1U,)"2L]("U$2$]35$E.1D\]7"(D>TA/4U1)3D9/?5PB"B`@
M0T9,04=3("`@("`@("`@("L]("U$4D%$25531%]615)324]./5PB)'M2041)
M55-$7U9%4E-)3TY]7"(*0$`@+3,T+#$Y("LS-"PQ,B!`0`H@(`H@(')A9')E
M;&%Y+F\Z(')A9')E;&%Y+F,@)"A)3D-,541%4RD*("`))"A#0RD@)"A#1DQ!
M1U,I("UC(')A9')E;&%Y+F,*+4!`("TQ,S@L,3,@*S$S."PQ,R!`0`HK0$`@
M+3$S."PW("LQ,S@L-R!`0`H@(`DD*$-#*2`D*$-&3$%'4RD@+6,@<F%D=VAO
M+F,*("`*+2!R861W:&\Z(')A9'=H;RYO(&UA:6YC;VYF:6<N;R!U=&EL+F\@
M;F%S+F\@8VQI96YT+F\@;&]G+F\@8V]N9F9I;&4N;R!F:6QE<RYO('AL870N
M;PHM+0DD*$-#*2`D*$Q$1DQ!1U,I("UO(')A9'=H;R!R861W:&\N;R!M86EN
M8V]N9FEG+F\@=71I;"YO(&YA<RYO(&-L:65N="YO(&QO9RYO(&-O;F9F:6QE
M+F\@9FEL97,N;R!X;&%T+F\@)"A,24)3*0HM*PDD*$-#*2`D*$Q$1DQ!1U-?
M34%)3BD@+6\@<F%D=VAO(')A9'=H;RYO(&UA:6YC;VYF:6<N;R!U=&EL+F\@
M;F%S+F\@8VQI96YT+F\@;&]G+F\@8V]N9F9I;&4N;R!F:6QE<RYO('AL870N
M;R`D*$Q)0E,I"BT@"BT@<F%D>F%P+F\Z(')A9'IA<"YC("0H24Y#3%5$15,I
M"BT@"20H0T,I("0H0T9,04=3*2`M8R!R861Z87`N8PHM(`HM(')A9'IA<#H@
M<F%D>F%P+F\@;6%I;F-O;F9I9RYO('5T:6PN;R!N87,N;R!L;V<N;R!C;&EE
M;G0N;R!C;VYF9FEL92YO(&9I;&5S+F\@>&QA="YO"BTM"20H0T,I("0H0T9,
M04=3*2`D*$Q$1DQ!1U,I("UO(')A9'IA<"!R861Z87`N;R!M86EN8V]N9FEG
M+F\@=71I;"YO(&YA<RYO(&QO9RYO(&-L:65N="YO(&-O;F9F:6QE+F\@9FEL
M97,N;R!X;&%T+F\@)"A,24)3*0HM*PDD*$-#*2`D*$-&3$%'4RD@)"A,1$9,
M04=37TU!24XI("UO(')A9'IA<"!R861Z87`N;R!M86EN8V]N9FEG+F\@=71I
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M;&$@)"A,24)3*2`D*$Q#4EE05"D**RL))"A,24)43T],*2`M+6UO9&4];&EN
M:R`D*$-#*2`D*$Q$1DQ!1U-?34%)3BD@+6\@<F%D=VAO(')A9'=H;RYO('5T
M:6PN;R!L;V<N;R!C;VYF9FEL92YO("XN+VQI8B]L:6)R861I=7,N;&$@)"A,
M24)3*2`D*$Q#4EE05"D*("`*("!C;&5A;CH*("`)<FT@+7)F("HN;R`J+G-O
6("I^("0H0DE.05))15,I("YL:6)S"@``
`
end


>Release-Note:
>Audit-Trail:
>Unformatted: