shield Security update for freeradius-server

SUSE-SLE-SDK-12-SP2-2017-1373

This update for freeradius fixes the following issues: Security issues fixed: - CVE-2017-10988: Decode 'signed' attributes correctly. (bnc#1049086) - CVE-2017-10987: Check for option overflowing the packet. (bnc#1049086) - CVE-2017-10985: Fix infinite loop and memory exhaustion with 'concat' attributes. (bnc#1049086) - CVE-2017-10984: Fix write overflow in data2vp_wimax(). (bnc#1049086) - CVE-2017-10983: Fix read overflow when decoding option 63. (bnc#1049086) - CVE-2017-10978: Fix read / write overflow in make_secret(). (bnc#1049086)

• Release Date
  Aug 23 2017
• References
  Bugzilla: 1049086
  CVEs: CVE-2017-10988, CVE-2017-10987, CVE-2017-10985, CVE-2017-10984, CVE-2017-10983, CVE-2017-10978
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.2 aarch64

• Packages
  freeradius-server
  Very Highly Configurable Radius Server

  3.0.3-17.9.1 lock src

  freeradius-server-devel
  FreeRADIUS Development Files (static libs)

  3.0.3-17.9.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 ppc64le

• Packages
  freeradius-server
  Very Highly Configurable Radius Server

  3.0.3-17.9.1 lock src

  freeradius-server-devel
  FreeRADIUS Development Files (static libs)

  3.0.3-17.9.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 x86_64

• Packages
  freeradius-server
  Very Highly Configurable Radius Server

  3.0.3-17.9.1 lock src

  freeradius-server-devel
  FreeRADIUS Development Files (static libs)

  3.0.3-17.9.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 s390x

• Packages
  freeradius-server
  Very Highly Configurable Radius Server

  3.0.3-17.9.1 lock src

  freeradius-server-devel
  FreeRADIUS Development Files (static libs)

  3.0.3-17.9.1 lock rpm