|
Cistron RADIUS Remote Signed NAS-Port Number Expansion Memory Corruption Vulnerability
Solution: Conectiva has released a security advisory (CLA-2003:664) containing fixes to address this issue. Users are advised to upgrade as soon as possible. Fixes are listed below. SuSE has released a security advisory (SuSE-SA:2003:030) containing fixes to address this issue. Users are advised to upgrade as soon as possible. Further information regarding how to obtain and apply fixes can be found in the attached advisory. Cistron RADIUS 1.6.7 is currently under development and will address this issue. Debian has released advisory DSA 321-1 with fixes to address this issue. See referenced advisory for additional information. Gentoo has released fixes to address this issue. The associated advisory contains the following information: It is recommended that all Gentoo Linux users who are running net-dialup/cistronradius upgrade to cistronradius-1.6.6-r1 as follows emerge sync emerge cistronradius emerge clean Miquel van Smoorenburg Cistron Radius 1.6.4
Miquel van Smoorenburg Cistron Radius 1.6.6
|
|
|
Privacy Statement |