ELSA-2017-1759

ELSA-2017-1759 - freeradius security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2017-07-18

Description

[2.2.6-7]
- Resolves: Bug#1469115 CVE-2017-10979 freeradius: Out-of-bounds write in
rad_coalesce()
- Resolves: Bug#1469118 CVE-2017-10978 freeradius: Out-of-bounds read/write
due to improper output buffer size check in make_secret()
- Resolves: Bug#1469120 CVE-2017-10980 freeradius: Memory leak in decode_tlv()
- Resolves: Bug#1469122 CVE-2017-10981 freeradius: Memory leak in
fr_dhcp_decode()
- Resolves: Bug#1469124 CVE-2017-10982 freeradius: Out-of-bounds read in
fr_dhcp_decode_options()
- Resolves: Bug#1469126 CVE-2017-10983 freeradius: Out-of-bounds read in
fr_dhcp_decode() when decoding option 63

Related CVEs

CVE-2017-10978

CVE-2017-10982

CVE-2017-10983

CVE-2017-10979

CVE-2017-10980

CVE-2017-10981

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 6 (i386)	freeradius-2.2.6-7.el6_9.src.rpm	aa92823aecab33c5131cfbfe54c23cf3	-
	freeradius-2.2.6-7.el6_9.i686.rpm	0b6ee8dd3a42196fd86acb9e34aab23a	-
	freeradius-krb5-2.2.6-7.el6_9.i686.rpm	0c4956a1c8492acb96a40cafd3e4ee47	-
	freeradius-ldap-2.2.6-7.el6_9.i686.rpm	57adff501a6426bb14c32d5a02205bdb	-
	freeradius-mysql-2.2.6-7.el6_9.i686.rpm	7af02192932717dc951c59ba4b2499d0	-
	freeradius-perl-2.2.6-7.el6_9.i686.rpm	7d60de452db6ef9ab1b0ca71584be46c	-
	freeradius-postgresql-2.2.6-7.el6_9.i686.rpm	1d9182b11e2094641d9988b5cb9712a2	-
	freeradius-python-2.2.6-7.el6_9.i686.rpm	f72ae6e5459639d31b46311fa237a15f	-
	freeradius-unixODBC-2.2.6-7.el6_9.i686.rpm	47055947c8efef0678432bfee79e80c4	-
	freeradius-utils-2.2.6-7.el6_9.i686.rpm	e0d2e74a872a6cc13e285023506782d9	-
Oracle Linux 6 (x86_64)	freeradius-2.2.6-7.el6_9.src.rpm	aa92823aecab33c5131cfbfe54c23cf3	-
	freeradius-2.2.6-7.el6_9.x86_64.rpm	3ab5028e7f8277be0bfed2162e65b98a	-
	freeradius-krb5-2.2.6-7.el6_9.x86_64.rpm	8a86ac91c28ac3dc9ae2758308339214	-
	freeradius-ldap-2.2.6-7.el6_9.x86_64.rpm	c0bffe55126a08b4cef0cc0a126f9106	-
	freeradius-mysql-2.2.6-7.el6_9.x86_64.rpm	2d7e865e60c96e2f0a0d36f9f9ccbb43	-
	freeradius-perl-2.2.6-7.el6_9.x86_64.rpm	1dda954626bdd029384b80695d3617b2	-
	freeradius-postgresql-2.2.6-7.el6_9.x86_64.rpm	fca0ce862b56739398e9263327bf2704	-
	freeradius-python-2.2.6-7.el6_9.x86_64.rpm	3a6bf4f408f799cd632008daa2fc42de	-
	freeradius-unixODBC-2.2.6-7.el6_9.x86_64.rpm	eee8d5b028f5bc63cab031e8b67bcd2d	-
	freeradius-utils-2.2.6-7.el6_9.x86_64.rpm	07cf91a313bdecba280c754de5e7d427	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team