Synopsis

Important: ppp security update

Type/Severity

Security Advisory: Important

Topic

An update for ppp is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The ppp packages contain the Point-to-Point Protocol (PPP) daemon and documentation for PPP support. The PPP protocol provides a method for transmitting datagrams over serial point-to-point links. PPP is usually used to dial in to an Internet Service Provider (ISP) or other organization over a modem and phone line.

Security Fix(es):

• ppp: Buffer overflow in the eap_request and eap_response functions in eap.c (CVE-2020-8597)
  

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 8.0 ppc64le
• Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.0 x86_64

Fixes

• BZ - 1800727 - CVE-2020-8597 ppp: Buffer overflow in the eap_request and eap_response functions in eap.c

CVEs

• CVE-2020-8597

References

• https://access.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 8.0

SRPM
ppp-2.4.7-26.el8_0.src.rpm	SHA-256: 9dc9aeb2866adfebf0aef74b9937eafe89e9a03112273dabe329792bbde0aab7
ppc64le
ppp-2.4.7-26.el8_0.ppc64le.rpm	SHA-256: 1dd9f4e8935de0b5afc387646c5ddb5af513907a9b63b9f33d8aa0af881693bb
ppp-debuginfo-2.4.7-26.el8_0.ppc64le.rpm	SHA-256: 34fe04426fd4ad8ed89cf3b9e50a631b505d1fb02f48b91f8313628ce0ad8726
ppp-debugsource-2.4.7-26.el8_0.ppc64le.rpm	SHA-256: ede6da9c9ad04d9195e8ac0dfbd5a667371ef731b62a2b6d156458f06d8660d2

Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.0

SRPM
ppp-2.4.7-26.el8_0.src.rpm	SHA-256: 9dc9aeb2866adfebf0aef74b9937eafe89e9a03112273dabe329792bbde0aab7
x86_64
ppp-2.4.7-26.el8_0.x86_64.rpm	SHA-256: 67eac0f97cec3913b472906548d31d2ff960cc69f2115c49966a3bbefa9685fd
ppp-debuginfo-2.4.7-26.el8_0.x86_64.rpm	SHA-256: ec420ff2b3e52e21c2074dcad011ebc0a42d923f44d3a3e090f9538bdf799c20
ppp-debugsource-2.4.7-26.el8_0.x86_64.rpm	SHA-256: 50eb8c5093583a390e301b4bf9a09f95076de6addab9b1d1613b96215daf96d5