[El-errata] ELSA-2017-1759 Important: Oracle Linux 6 freeradius security update

Errata Announcements for Oracle Linux el-errata at oss.oracle.com
Tue Jul 18 13:52:16 PDT 2017


Oracle Linux Security Advisory ELSA-2017-1759

http://linux.oracle.com/errata/ELSA-2017-1759.html

The following updated rpms for Oracle Linux 6 have been uploaded to the 
Unbreakable Linux Network:

i386:
freeradius-2.2.6-7.el6_9.i686.rpm
freeradius-krb5-2.2.6-7.el6_9.i686.rpm
freeradius-ldap-2.2.6-7.el6_9.i686.rpm
freeradius-mysql-2.2.6-7.el6_9.i686.rpm
freeradius-perl-2.2.6-7.el6_9.i686.rpm
freeradius-postgresql-2.2.6-7.el6_9.i686.rpm
freeradius-python-2.2.6-7.el6_9.i686.rpm
freeradius-unixODBC-2.2.6-7.el6_9.i686.rpm
freeradius-utils-2.2.6-7.el6_9.i686.rpm

x86_64:
freeradius-2.2.6-7.el6_9.x86_64.rpm
freeradius-krb5-2.2.6-7.el6_9.x86_64.rpm
freeradius-ldap-2.2.6-7.el6_9.x86_64.rpm
freeradius-mysql-2.2.6-7.el6_9.x86_64.rpm
freeradius-perl-2.2.6-7.el6_9.x86_64.rpm
freeradius-postgresql-2.2.6-7.el6_9.x86_64.rpm
freeradius-python-2.2.6-7.el6_9.x86_64.rpm
freeradius-unixODBC-2.2.6-7.el6_9.x86_64.rpm
freeradius-utils-2.2.6-7.el6_9.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol6/SRPMS-updates/freeradius-2.2.6-7.el6_9.src.rpm



Description of changes:

[2.2.6-7]
- Resolves: Bug#1469115 CVE-2017-10979 freeradius: Out-of-bounds write in
                         rad_coalesce()
- Resolves: Bug#1469118 CVE-2017-10978 freeradius: Out-of-bounds read/write
                         due to improper output buffer size check in 
make_secret()
- Resolves: Bug#1469120 CVE-2017-10980 freeradius: Memory leak in 
decode_tlv()
- Resolves: Bug#1469122 CVE-2017-10981 freeradius: Memory leak in
                         fr_dhcp_decode()
- Resolves: Bug#1469124 CVE-2017-10982 freeradius: Out-of-bounds read in
                         fr_dhcp_decode_options()
- Resolves: Bug#1469126 CVE-2017-10983 freeradius: Out-of-bounds read in
                         fr_dhcp_decode() when decoding option 63





More information about the El-errata mailing list