[El-errata] ELSA-2017-1759 Important: Oracle Linux 6 freeradius security update
Errata Announcements for Oracle Linux
el-errata at oss.oracle.com
Tue Jul 18 13:52:16 PDT 2017
Oracle Linux Security Advisory ELSA-2017-1759
http://linux.oracle.com/errata/ELSA-2017-1759.html
The following updated rpms for Oracle Linux 6 have been uploaded to the
Unbreakable Linux Network:
i386:
freeradius-2.2.6-7.el6_9.i686.rpm
freeradius-krb5-2.2.6-7.el6_9.i686.rpm
freeradius-ldap-2.2.6-7.el6_9.i686.rpm
freeradius-mysql-2.2.6-7.el6_9.i686.rpm
freeradius-perl-2.2.6-7.el6_9.i686.rpm
freeradius-postgresql-2.2.6-7.el6_9.i686.rpm
freeradius-python-2.2.6-7.el6_9.i686.rpm
freeradius-unixODBC-2.2.6-7.el6_9.i686.rpm
freeradius-utils-2.2.6-7.el6_9.i686.rpm
x86_64:
freeradius-2.2.6-7.el6_9.x86_64.rpm
freeradius-krb5-2.2.6-7.el6_9.x86_64.rpm
freeradius-ldap-2.2.6-7.el6_9.x86_64.rpm
freeradius-mysql-2.2.6-7.el6_9.x86_64.rpm
freeradius-perl-2.2.6-7.el6_9.x86_64.rpm
freeradius-postgresql-2.2.6-7.el6_9.x86_64.rpm
freeradius-python-2.2.6-7.el6_9.x86_64.rpm
freeradius-unixODBC-2.2.6-7.el6_9.x86_64.rpm
freeradius-utils-2.2.6-7.el6_9.x86_64.rpm
SRPMS:
http://oss.oracle.com/ol6/SRPMS-updates/freeradius-2.2.6-7.el6_9.src.rpm
Description of changes:
[2.2.6-7]
- Resolves: Bug#1469115 CVE-2017-10979 freeradius: Out-of-bounds write in
rad_coalesce()
- Resolves: Bug#1469118 CVE-2017-10978 freeradius: Out-of-bounds read/write
due to improper output buffer size check in
make_secret()
- Resolves: Bug#1469120 CVE-2017-10980 freeradius: Memory leak in
decode_tlv()
- Resolves: Bug#1469122 CVE-2017-10981 freeradius: Memory leak in
fr_dhcp_decode()
- Resolves: Bug#1469124 CVE-2017-10982 freeradius: Out-of-bounds read in
fr_dhcp_decode_options()
- Resolves: Bug#1469126 CVE-2017-10983 freeradius: Out-of-bounds read in
fr_dhcp_decode() when decoding option 63
More information about the El-errata
mailing list