Software update: PacketFence 1.8.7

An NAC system can be used to secure a network environment. This allows, based on pre-set policies, network devices to be automatically blocked when an undesirable situation occurs. Think of unknown network devices of visitors, a worm that is trying to spread or an authorized device that is equipped with a different operating system via a boot flop or live CD. PacketFence is one such nac system with support for 802.1x and vlan isolation, with which a network device can be placed in the correct vlan after analysis. For more information, we refer you to this page. The developers have released version 1.8.7 and provided it with the following announcement:

PacketFence 1.8.7 released

The Inverse Team is pleased to announce the immediate availability of PacketFence 1.8.7. This is a security fix release which also includes some bug fixes.

Bug fixes:

• SECURITY: Fixed “username” Cross-Site Scripting Vulnerability (#884)
• Fixed issues with Aruba Controller (#871, #873)
• Fixed issues with multiple registration in same browser session (#761)
• Fixed issues in some wireless scenarios (#880)
• Fixed situation where a Windows 7 client would slow down captive portal
• Fixed missing dependencies in packetfence-remote-snort-sensor RPM (#881, #882)
• Fixed bad HTML in registration pages
• Clarified some error messages