packages, branch for-15.05

Merge pull request #6124 from wigyori/for-15.05-freeradius2

2018-06-15T14:02:27Z

CC: freeradius2: bump to 2.2.10

Merge pull request #6120 from wigyori/for-15.05-perl

2018-05-30T01:00:15Z

CC: perl5: upgrade 3 CPAN packages to fix build

Merge pull request #6126 from wigyori/for-15.05-pcre_nginx

2018-05-25T11:52:53Z

CC: pcre: bump to 8.41 and fix CVEs

freeradius2: bump to 2.2.10

2018-05-23T23:35:09Z

- Fix multiple security issues. See http://freeradius.org/security/fuzzer-2017.html Thanks to Guido Vranken for working with us to discover the issues and test the fixes. - FR-GV-207 Avoid zero-length malloc() in data2vp(). - FR-GV-206 correct decoding of option 60. - FR-GV-205 check for "too long" WiMAX options. - FR-GV-204 free VP if decoding fails, so we don't leak memory. - FR-GV-203 fix memory leak when using decode_tlv(). - FR-GV-202 check for "too long" attributes. - FR-GV-201 check input/output length in make_secret(). - FR-AD-001 Use strncmp() instead of memcmp() for bounded data. - Disable in-memory TLS session caches due to OpenSSL API issues. - Allow issuer_cert to be empty. - Look for extensions using correct index. - Fix types. - Work around OpenSSL 1.0.2 problems, which cause failures in TLS-based EAP methods. - Revert RedHat contributed bug which removes run-time checks for OpenSSL consistency. - Allow OCSP responder URL to be later in the packet Fix by Ean Pasternak. - Catch empty subject and non-existent issuer cert in OCSP Fix by Ean Pasternak. - Allow non-FIPS for MD5 Fix by Ean Pasternak. Signed-off-by: Zoltan HERPAI

freeradius2: update to version 2.2.9

2018-05-23T23:35:06Z

Signed-off-by: Daniel Golle

pcre: Added fix for CVE-2017-11164 by adding stack recursion limit

2018-05-23T23:32:52Z

Signed-off-by: Thomas Heil

pcre: upgrade to version 8.41 - fixes security issues

2018-05-23T23:32:48Z

Signed-off-by: Thomas Heil

fix CVE-2017-7186 Fix CVE-2017-7186 mentioned in https://bugs.exim.org/show_bug.cgi?id=2052

2018-05-23T23:32:44Z

Signed-off-by: Thomas Heil

package: pcre bump to version 8.40

2018-05-23T23:32:40Z

Signed-off-by: heil

perl-uri: bump to 1.74

2018-05-23T23:19:23Z

Signed-off-by: Zoltan HERPAI