From: Alan T. DeKok <aland@freeradius.org>
Date: Fri, 26 May 2017 18:11:20 +0000 (-0400)
Subject: note recent updates
X-Git-Tag: release_3_0_14^0
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=a6ce2fc6c7c21d232175f535d3128349bcd2d784;p=thirdparty%2Ffreeradius-server.git

note recent updates
---

diff --git a/doc/ChangeLog b/doc/ChangeLog
index 337bffbedbf..a26a7d1ff6d 100644
--- a/doc/ChangeLog
+++ b/doc/ChangeLog
@@ -2,6 +2,7 @@ FreeRADIUS 3.0.14 Mon 06 Mar 2017 13:00:00 EDT urgency=medium
 	Feature improvements
 	* Enforce TLS client certificate expiration on
 	  session resumption, and Session-Timeout.
+	  See CVE-2017-9148.
 	* Updated dictionary.cisco.vpn3000, dictionary.patton
 	* Added dictionary.dellemc
 	* Lowered the log output for failed PEAP sessions.
@@ -47,6 +48,8 @@ FreeRADIUS 3.0.14 Mon 06 Mar 2017 13:00:00 EDT urgency=medium
 	* Many fixes found by PVS-Studio.  Thanks to PVS-Studio
 	  for giving us a test license.  Please see the git commit
 	  history for more information.
+	* Fix incorrect length check in EAP-PWD.  This may
+	  be exploitable.
 
 FreeRADIUS 3.0.13 Mon 06 Mar 2017 13:00:00 EDT urgency=medium
 	Feature improvements