File _patchinfo of Package patchinfo.3877
<patchinfo incident="3877">
<category>security</category>
<rating>important</rating>
<packager>adamm</packager>
<summary>Security update for freeradius-server</summary>
<description>
This update of freeradius-server fixes several issues.
Security issue fixed:
- CVE-2015-4680: Fixed Insufficent CRL application for intermediate certificates (bsc#935573)
Non security issues fixed:
- Allows FreeRadius Server to start on SUSE Linux Enterprise Server 12 SP2 systems
by relaxing a too strict openssl version check. (bsc#1013311)
- Fixed radclient error free() invalid pointer (bsc#911886)
- Fixed failing rebuild of freeradius-server package (bsc#951404)
</description>
<issue tracker="bnc" id="935573">VUL-1: CVE-2015-4680: freeradius, freeradius-server: insufficent CRL application for intermediate certificates</issue>
<issue tracker="cve" id="2015-4680"/>
<issue tracker="bnc" id="1013311">L3: libssl version mismatch. built: 1000109f linked: 100020af when starting radiusd -X</issue>
<issue tracker="bnc" id="951404">Rebuild of freeradius-server package fails</issue>
<issue tracker="bnc" id="911886">radclient error free() invalid pointer</issue>
</patchinfo>