RHSA-2015:1287Medium
Red Hat Security Advisory: freeradius security, bug fix, and enhancement update
🔗 CVE IDs covered (1)
📋 Description
CVE-2014-2015 — freeradius: stack-based buffer overflow flaw in rlm_pap module
🎯 Affected products72
- Red Hat Enterprise Linux Server (v. 6)
- Red Hat Enterprise Linux Server Optional (v. 6)
- Red Hat Enterprise Linux Workstation (v. 6)
- Red Hat Enterprise Linux Workstation Optional (v. 6)
- freeradius-0:2.2.6-4.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)
- freeradius-0:2.2.6-4.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)
- freeradius-0:2.2.6-4.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)
- freeradius-0:2.2.6-4.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)
- freeradius-0:2.2.6-4.el6.src as a component of Red Hat Enterprise Linux Server (v. 6)
- freeradius-0:2.2.6-4.el6.src as a component of Red Hat Enterprise Linux Workstation (v. 6)
- freeradius-0:2.2.6-4.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)
- freeradius-0:2.2.6-4.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)
- freeradius-debuginfo-0:2.2.6-4.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)
- freeradius-debuginfo-0:2.2.6-4.el6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)
- freeradius-debuginfo-0:2.2.6-4.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)
- freeradius-debuginfo-0:2.2.6-4.el6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)
- freeradius-debuginfo-0:2.2.6-4.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)
- freeradius-debuginfo-0:2.2.6-4.el6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)
- freeradius-debuginfo-0:2.2.6-4.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)
- freeradius-debuginfo-0:2.2.6-4.el6.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)
- freeradius-debuginfo-0:2.2.6-4.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)
- freeradius-debuginfo-0:2.2.6-4.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)
- freeradius-debuginfo-0:2.2.6-4.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)
- freeradius-debuginfo-0:2.2.6-4.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)
- freeradius-krb5-0:2.2.6-4.el6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)
- freeradius-krb5-0:2.2.6-4.el6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)
- freeradius-krb5-0:2.2.6-4.el6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)
- freeradius-krb5-0:2.2.6-4.el6.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)
- freeradius-krb5-0:2.2.6-4.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)
- freeradius-krb5-0:2.2.6-4.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)
- +42 more not shown
✅ Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
🔗 References (16)
- selfhttps://access.redhat.com/errata/RHSA-2015:1287
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://raw.githubusercontent.com/FreeRADIUS/freeradius-server/v3.0.x/doc/ChangeLog
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=904578
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=921563
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=921567
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1060319
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1066761
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1078736
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1135439
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1142669
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1173388
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1189011
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1189386
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1189394
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1287.json