Updated php-radius packages fix CVE-2013-2220
Publication date: 09 Jul 2013Modification date: 09 Jul 2015
Type: security
Affected Mageia releases : 2 , 3
CVE: CVE-2013-2220
Description
Updated php-radius package fixes security vulnerability: Fix a security issue in radius_get_vendor_attr() by enforcing checks of the VSA length field against the buffer size (CVE-2013-2220).
References
SRPMS
2/core
- php-radius-1.2.7-1.mga2
3/core
- php-radius-1.2.7-1.mga3