The Debian package accidently installed its configuration file
/etc/pam_radius_auth.conf world-readable. Since it may possibly
contain secrets all local users are able to read them if the
administrator hasn't adjusted file permissions. This problem is
Debian specific.
CAN-2005-0108
Leon Juranic discoverd an integer underflow in the mod_auth_radius
module for Apache which is also present in libpam-radius-auth.
For the stable distribution (woody) these problems have been fixed in
version 1.3.14-1.3.
For the unstable distribution (sid) these problems have been fixed in
version 1.3.16-3.
We recommend that you upgrade your libpam-radius-auth package.
Upgrade Instructions
- --------------------wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.
If you are using the apt-get package manager, use the line for
sources.list as given below:
apt-get update
will update the internal database
apt-get...
Get the latest Linux and open source security news straight to your inbox.