Freebox Server (Pop V8/ Delta V7 / Revolution V6 / Server Mini 4K)

  • Status Nouveau
  • Percent Complete
    0%
  • Task Type Évolution
  • Category Freebox OS
  • Assigned To No-one
  • Operating System Tous
  • Severity Critical
  • Priority Very Low
  • Reported Version 4.2.7
  • Due in Version Undecided
  • Due Date Undecided
  • Votes
  • Private
Attached to Project: Freebox Server (Pop V8/ Delta V7 / Revolution V6 / Server Mini 4K)
Opened by Neustradamus_ - 08/01/2021
Last edited by Thibaut Freebox - 08/01/2021

FS#33690 - [Tous les Freebox Server] Demande de mise à jour (faille critique) : ppp 2.4.8 -> 2.4.9 (2021-01-04)

Afin de résoudre certains problèmes de connexions, je redemande la mise à jour de ppp 2.4.8 → 2.4.9 (2021-01-04) et ainsi corriger de failles de sécurité (vulnérabilités) nommées CVEs en même temps

https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=ppp

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8597
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3310

https://github.com/paulusmack/ppp
https://download.samba.org/pub/ppp/

What’s new in ppp-2.4.9.

* Support for new EAP (Extensible Authentication Protocol) methods:
- Support for EAP-TLS, from Jan Just Keijser and others
- Support for EAP-MSCHAPv2, from Eivind Næss, Thomas Omerzu, Tijs Van Buggenhout and others

* New pppd options:
- chap-timeout
- chapms-strip-domain
- replacedefaultroute
- noreplacedefaultroute
- ipv6cp-accept-remote
- lcp-echo-adaptive
- ip-up-script
- ip-down-script
- ca
- capath
- cert
- key
- crl-dir
- crl
- max-tls-version
- need-peer-eap

* Fixes for CVE-2020-8597 and CVE-2015-3310.

* libpcap is now required when compiling on Linux (previously, if libpcap was not present, pppd would be compiled without packet filtering support).

* The rp-pppoe plugin has been renamed to pppoe, to distinguish it from the upstream rp-pppoe code. Its options have changed names, but the old names are kept as aliases.

* The configure script now supports cross-compilation.

* Many bug fixes and cleanups.

Informations complémentaires :

libpcap 1.10.0 (2020-12-30) :
- https://www.tcpdump.org/

De la même entité :
tcpdump 4.99.0 (stable) (2020-12-30) :
- https://www.tcpdump.org/

PPP 2.5.0 (2023-04-04)
- https://github.com/paulusmack/ppp
- https://download.samba.org/pub/ppp/

Note: Il y a toujours des failles dans la version actuellement utilisée "2.4.8" :
- https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=ppp

Loading...

Available keyboard shortcuts

Tasklist

Task Details

Task Editing