[SECURITY] [DSA 6540-1] radsecproxy security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian Security Advisory DSA-6540-1 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
October 02, 2026 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : radsecproxy
CVE ID : CVE-2026-104201
It was discovered that incomplete validation of MS-PPPE packets in
radsecproxy, a Radius protocol proxy, could result in denial of service
or potentially the execution of arbitrary code.
For the stable distribution (trixie), this problem has been fixed in
version 1.11.2-1+deb13u1.
We recommend that you upgrade your radsecproxy packages.
For the detailed security status of radsecproxy please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/radsecproxy
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----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=Uf0Z
-----END PGP SIGNATURE-----
Reply to: