====================================================================

                              CERT-Renater

                 Note d'Information No. 2017/VULN276
_____________________________________________________________________

DATE                : 26/09/2017

HARDWARE PLATFORM(S):  /

OPERATING SYSTEM(S): macOS Server versions prior to 5.4.

=====================================================================
https://lists.apple.com/archives/security-announce/2017/Sep/msg00013.html
____________________________________________________________________

APPLE-SA-2017-09-25-9 macOS Server 5.4

macOS Server 5.4 is now available and addresses the following:

FreeRadius
Available for:  macOS High Sierra 10.13
Impact: Multiple issues in FreeRADIUS
Description: Multiple issues existed in FreeRADIUS before 2.2.10.
These were addressed by updating FreeRADIUS to version 2.2.10.
CVE-2017-10978
CVE-2017-10979

Installation note:

macOS Server 5.4 may be obtained from the Mac App Store.

Information will also be posted to the Apple Security Updates
web site: https://support.apple.com/kb/HT201222

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/

==========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44           +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41           +
+ 75013 Paris           | email: cert@support.renater.fr +
==========================================================