full-disclosure - [FD] APPLE-SA-2017-09-25-9 macOS Server 5.4

Open Source and information security mailing list archives

Message-id: <CAC296C7-F200-4F40-AAA2-24D929A21BEF@lists.apple.com>
Date: Mon, 25 Sep 2017 13:29:42 -0700
From: Apple Product Security <product-security-noreply@...ts.apple.com>
To: security-announce@...ts.apple.com
Subject: [FD] APPLE-SA-2017-09-25-9 macOS Server 5.4

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

APPLE-SA-2017-09-25-9 macOS Server 5.4

macOS Server 5.4 is now available and addresses the following:

FreeRadius
Available for:  macOS High Sierra 10.13
Impact: Multiple issues in FreeRADIUS
Description: Multiple issues existed in FreeRADIUS before 2.2.10.
These were addressed by updating FreeRADIUS to version 2.2.10.
CVE-2017-10978
CVE-2017-10979

Installation note:

macOS Server 5.4 may be obtained from the Mac App Store.

Information will also be posted to the Apple Security Updates
web site: https://support.apple.com/kb/HT201222

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - https://gpgtools.org
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=TY9V
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives