File _patchinfo of Package patchinfo.4927

<patchinfo incident="4927">
  <issue id="1027243" tracker="bnc">freeradius: regex do ignore case insensitive flag</issue>
  <issue id="1041445" tracker="bnc">VUL-0: CVE-2017-9148: freeradius-server: TLS resumption authentication bypass</issue>
  <issue id="2017-9148" tracker="cve" />
  <category>security</category>
  <rating>moderate</rating>
  <packager>adamm</packager>
  <description>This update for freeradius-server fixes the following issues:

Security issue fixed:

- CVE-2017-9148: Disable OpenSSL's internal session cache to mitigate
  authentication bypass. (bsc#1041445)

Non security issue fixed:

- Fix case insensitive matching in compiled regular expressions (bsc#1027243)
  
</description>
  <summary>Security update for freeradius-server</summary>
</patchinfo>
openSUSE Build Service is sponsored by