[Security Announce] [ MDVA-2010:031 ] freeradius

[news 28]

This is a multi-part message in MIME format...

 

------------=_1263660868-24326-3524

 

 

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1

 

_______________________________________________________________________

 

Mandriva Linux Advisory MDVA-2010:031

http://www.mandriva.com/security/

_______________________________________________________________________

 

Package : freeradius

Date : January 16, 2010

Affected: 2010.0

_______________________________________________________________________

 

Problem Description:

 

Perl scripts shipped in the freeradius-web sub package use File::Temp

perl module incorrectly, preventing to execute them correctly. In these

perl scripts, a change was made to replace the line "use File::Temp

\;" by "use File::Tempqw\(tempfile tempdir\)\;".

_______________________________________________________________________

 

References:

 

https://qa.mandriva.com/56866

https://qa.mandriva.com/56915

_______________________________________________________________________

 

Updated Packages:

 

Mandriva Linux 2010.0:

cafeaf96a73f1b1c5404dbcf95a0c9ed 2010.0/i586/freeradius-2.1.7-4.1mdv2010.0.i586.rpm

21f56febe4b0c116818f9be86086f611 2010.0/i586/freeradius-krb5-2.1.7-4.1mdv2010.0.i586.rpm

9d39dec0f64db7a633c1e987c72b6394 2010.0/i586/freeradius-ldap-2.1.7-4.1mdv2010.0.i586.rpm

4e7583a6602043b745b79d1cead4a4d7 2010.0/i586/freeradius-mysql-2.1.7-4.1mdv2010.0.i586.rpm

dc716d8a97f5e92975071b8f94b5e076 2010.0/i586/freeradius-postgresql-2.1.7-4.1mdv2010.0.i586.rpm

1a1646cc57324ba8b103d9cd1651a779 2010.0/i586/freeradius-unixODBC-2.1.7-4.1mdv2010.0.i586.rpm

788206bf2ddcc000554d7d4eb618d034 2010.0/i586/freeradius-web-2.1.7-4.1mdv2010.0.i586.rpm

d40853e4c0b2fb44eaddb1216f995d3f 2010.0/i586/libfreeradius1-2.1.7-4.1mdv2010.0.i586.rpm

325b3361ca1cb2eec1f6820a9480570b 2010.0/i586/libfreeradius-devel-2.1.7-4.1mdv2010.0.i586.rpm

5af88f5b4fff3ab3b5330c5de4b0e3c6 2010.0/SRPMS/freeradius-2.1.7-4.1mdv2010.0.src.rpm

 

Mandriva Linux 2010.0/X86_64:

32ddbe78711c74bceb17728a59a58bbd 2010.0/x86_64/freeradius-2.1.7-4.1mdv2010.0.x86_64.rpm

96b5042ff02ffb3ad3208368da585d2c 2010.0/x86_64/freeradius-krb5-2.1.7-4.1mdv2010.0.x86_64.rpm

363a90e7b3306adedcc0bf25abcbac0b 2010.0/x86_64/freeradius-ldap-2.1.7-4.1mdv2010.0.x86_64.rpm

968104636bd464976f61f190bcd0f960 2010.0/x86_64/freeradius-mysql-2.1.7-4.1mdv2010.0.x86_64.rpm

19da4e19fca373c79aa9e22531013db2 2010.0/x86_64/freeradius-postgresql-2.1.7-4.1mdv2010.0.x86_64.rpm

4352d973021d9c90ea970cd971c3fc13 2010.0/x86_64/freeradius-unixODBC-2.1.7-4.1mdv2010.0.x86_64.rpm

efd0e38376260c2cd71ecf1191b1dad8 2010.0/x86_64/freeradius-web-2.1.7-4.1mdv2010.0.x86_64.rpm

5bdd94a7861e6a62180518474c2ca5f6 2010.0/x86_64/lib64freeradius1-2.1.7-4.1mdv2010.0.x86_64.rpm

4fb4ab2f27e5140b93a14d2a8120946a 2010.0/x86_64/lib64freeradius-devel-2.1.7-4.1mdv2010.0.x86_64.rpm

5af88f5b4fff3ab3b5330c5de4b0e3c6 2010.0/SRPMS/freeradius-2.1.7-4.1mdv2010.0.src.rpm

_______________________________________________________________________

 

To upgrade automatically use MandrivaUpdate or urpmi. The verification

of md5 checksums and GPG signatures is performed automatically for you.

 

All packages are signed by Mandriva for security. You can obtain the

GPG public key of the Mandriva Security Team by executing:

 

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 

You can view other update advisories for Mandriva Linux at:

 

http://www.mandriva.com/security/advisories

 

If you want to report vulnerabilities, please contact

 

security_(at)_mandriva.com

_______________________________________________________________________

 

Type Bits/KeyID Date User ID

pub 1024D/22458A98 2000-07-10 Mandriva Security Team

 

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.9 (GNU/Linux)

 

iD8DBQFLUcQUmqjQ0CJFipgRAsLCAKC4l8TWtdAV1xZZdXzEWaG+79DD0ACfdr8C

slzj9ONOK9z/p5wILcM1VS8=

=E8oQ

-----END PGP SIGNATURE-----

 

 

------------=_1263660868-24326-3524

Content-Type: text/plain; name="message-footer.txt"

Content-Disposition: inline; filename="message-footer.txt"

Content-Transfer-Encoding: 8bit

 

To unsubscribe, send a email to sympa ( -at -) mandrivalinux.org

with this subject : unsubscribe security-announce

_______________________________________________________

Want to buy your Pack or Services from Mandriva?

Go to http://www.mandrivastore.com

Join the Club : http://www.mandrivaclub.com

_______________________________________________________

 

------------=_1263660868-24326-3524--