drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Pufferüberlauf in php-radius
Name: |
Pufferüberlauf in php-radius |
|
ID: |
MDVSA-2013:192 |
|
Distribution: |
Mandriva |
|
Plattformen: |
Mandriva Enterprise Server 5.0, Mandriva Business Server 1.0 |
|
Datum: |
Di, 2. Juli 2013, 22:44 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2220
http://pecl.php.net/package-changelog.php?package=radius&release=1.2.7 |
|
Applikationen: |
php-radius |
|
Originalnachricht |
This is a multi-part message in MIME format...
------------=_1372785871-2483-28
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
_______________________________________________________________________
Mandriva Linux Security Advisory MDVSA-2013:192 http://www.mandriva.com/en/support/security/ _______________________________________________________________________
Package : php-radius Date : July 2, 2013 Affected: Business Server 1.0, Enterprise Server 5.0 _______________________________________________________________________
Problem Description:
A security vulnerability was discovered and fixed in php-radius. Fix a security issue in radius_get_vendor_attr() by enforcing checks of the VSA length field against the buffer size (CVE-2013-2220). The updated packages have been upgraded to the 1.2.7 version which is not affected by this issue. _______________________________________________________________________
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2220 http://pecl.php.net/package-changelog.php?package=radius&release=1.2.7 _______________________________________________________________________
Updated Packages:
Mandriva Enterprise Server 5: 4790251f05e4c483852ce73c39a36ae3 mes5/i586/php-radius-1.2.7-0.1mdvmes5.2.i586.rpm a1280c451e434792b56b652c12615fb2 mes5/SRPMS/php-radius-1.2.7-0.1mdvmes5.2.src.rpm
Mandriva Enterprise Server 5/X86_64: 49b8a4f105f4c3fd17bc51bd3549a755 mes5/x86_64/php-radius-1.2.7-0.1mdvmes5.2.x86_64.rpm a1280c451e434792b56b652c12615fb2 mes5/SRPMS/php-radius-1.2.7-0.1mdvmes5.2.src.rpm
Mandriva Business Server 1/X86_64: e1d14e1423c3cadcbb9a091bc7b4dda7 mbs1/x86_64/php-radius-1.2.7-1.mbs1.x86_64.rpm 26cafae909e29f4c6c8821f0efbb80f8 mbs1/SRPMS/php-radius-1.2.7-1.mbs1.src.rpm _______________________________________________________________________
To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you.
All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing:
gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98
You can view other update advisories for Mandriva Linux at:
http://www.mandriva.com/en/support/security/advisories/
If you want to report vulnerabilities, please contact
security_(at)_mandriva.com _______________________________________________________________________
Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team <security*mandriva.com> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux)
iD8DBQFR0t/nmqjQ0CJFipgRAv4qAKCu7SbGVbUcN4r1DAq4d0ndaH7shwCg4Ywr dzfW7s0ZQ+EAc++ejxRNIxA= =CQRO -----END PGP SIGNATURE-----
------------=_1372785871-2483-28 Content-Type: text/plain; charset="UTF-8"; name="message-footer.txt" Content-Disposition: inline; filename="message-footer.txt" Content-Transfer-Encoding: 8bit
To unsubscribe, send a email to sympa@mandrivalinux.org with this subject : unsubscribe security-announce _______________________________________________________ Want to buy your Pack or Services from Mandriva? Go to http://store.mandriva.com _______________________________________________________
------------=_1372785871-2483-28--
|
|
|
|