Oval Definition:	oval:com.redhat.rhsa:def:20091451
Revision Date: 2009-09-17 Version: 640 Title: RHSA-2009:1451: freeradius security update (Moderate) Description: FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network. An input validation flaw was discovered in the way FreeRADIUS decoded specific RADIUS attributes from RADIUS packets. A remote attacker could use this flaw to crash the RADIUS daemon (radiusd) via a specially-crafted RADIUS packet. (CVE-2009-3111) Users of FreeRADIUS are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. After installing the update, radiusd will be restarted automatically. Family: unix Class: patch Status: Reference(s): CVE-2009-3111 RHSA-2009:1451 RHSA-2009:1451-01 RHSA-2009:1451-01 Platform(s): Red Hat Enterprise Linux 5 Product(s): Definition Synopsis Red Hat Enterprise Linux must be installed OR Package Information Red Hat Enterprise Linux 5 is installed AND freeradius is earlier than 0:1.1.3-1.5.el5_4 AND freeradius is signed with Red Hat redhatrelease2 key freeradius-mysql is earlier than 0:1.1.3-1.5.el5_4 AND freeradius-mysql is signed with Red Hat redhatrelease2 key freeradius-postgresql is earlier than 0:1.1.3-1.5.el5_4 AND freeradius-postgresql is signed with Red Hat redhatrelease2 key freeradius-unixODBC is earlier than 0:1.1.3-1.5.el5_4 AND freeradius-unixODBC is signed with Red Hat redhatrelease2 key
BACK