Mageia 2022-0482: freeradius security update | LinuxSecurity.com

What Are You Looking For?

Popular Tags

Contribute
MGASA-2022-0482 - Updated freeradius packages fix security vulnerability

Publication date: 30 Dec 2022
URL: https://advisories.mageia.org/MGASA-2022-0482.html
Type: security
Affected Mageia releases: 8
CVE: CVE-2022-41859,
     CVE-2022-41860,
     CVE-2022-41861

Information leakage in EAP-PWD. (CVE-2022-41859)
Crash on unknown option in EAP-SIM. (CVE-2022-41860)
Crash on invalid abinary data. (CVE-2022-41861)

References:
- https://bugs.mageia.org/show_bug.cgi?id=31291
- https://lists.fedoraproject.org/archives/list/[email protected]/thread/GZM4O5MGLKNOE2SSXAXQNL5DSII556QA/
- https://lists.opensuse.org/archives/list/[email protected]/thread/YGQKLVAIGSOB2CSLQ2ASBK2MJAHL4LCI/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41859
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41860
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41861

SRPMS:
- 8/core/freeradius-3.0.22-1.1.mga8

Mageia 2022-0482: freeradius security update

Information leakage in EAP-PWD

Summary

Information leakage in EAP-PWD. (CVE-2022-41859) Crash on unknown option in EAP-SIM. (CVE-2022-41860) Crash on invalid abinary data. (CVE-2022-41861)

References

- https://bugs.mageia.org/show_bug.cgi?id=31291

- https://lists.fedoraproject.org/archives/list/[email protected]/thread/GZM4O5MGLKNOE2SSXAXQNL5DSII556QA/

- https://lists.opensuse.org/archives/list/[email protected]/thread/YGQKLVAIGSOB2CSLQ2ASBK2MJAHL4LCI/

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41859

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41860

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41861

Resolution

MGASA-2022-0482 - Updated freeradius packages fix security vulnerability

SRPMS

- 8/core/freeradius-3.0.22-1.1.mga8

Severity
Publication date: 30 Dec 2022
URL: https://advisories.mageia.org/MGASA-2022-0482.html
Type: security
CVE: CVE-2022-41859, CVE-2022-41860, CVE-2022-41861

News

Advisories

HOWTOs

Features

A Complete Guide to Security Automation & Reporting Using Open Source Tools
How to Check if Your Linux System is Infected with a Virus
Security Considerations for Azure Linux & Windows Subsystem for Linux Users
Admins Receive Automated Linux Patch Management & Improved Security with ManageEngine Endpoint Central
Linux Malware: The Truth About This Growing Threat [Updated]

About Us

Powered By

Footer Logo

We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy. 

Learn More About Our Cookie Policy