Skip to content
OpenAdvisories
Medium ELSA-2020-1672 1 CVE

Moderate: freeradius:3.0 security update (Oracle Linux 8)

Published May 5, 2020 · Updated May 5, 2020

Ecosystem: Oracle Linux

Fixed packages 12

ReleasePackageFixed in
Oracle Linux · 8 freeradius 0:3.0.17-7.module+el8.2.0+5505+9f97be83
Oracle Linux · 8 freeradius-devel 0:3.0.17-7.module+el8.2.0+5505+9f97be83
Oracle Linux · 8 freeradius-doc 0:3.0.17-7.module+el8.2.0+5505+9f97be83
Oracle Linux · 8 freeradius-krb5 0:3.0.17-7.module+el8.2.0+5505+9f97be83
Oracle Linux · 8 freeradius-ldap 0:3.0.17-7.module+el8.2.0+5505+9f97be83
Oracle Linux · 8 freeradius-mysql 0:3.0.17-7.module+el8.2.0+5505+9f97be83
Oracle Linux · 8 freeradius-perl 0:3.0.17-7.module+el8.2.0+5505+9f97be83
Oracle Linux · 8 freeradius-postgresql 0:3.0.17-7.module+el8.2.0+5505+9f97be83
Oracle Linux · 8 freeradius-rest 0:3.0.17-7.module+el8.2.0+5505+9f97be83
Oracle Linux · 8 freeradius-sqlite 0:3.0.17-7.module+el8.2.0+5505+9f97be83
Oracle Linux · 8 freeradius-unixODBC 0:3.0.17-7.module+el8.2.0+5505+9f97be83
Oracle Linux · 8 freeradius-utils 0:3.0.17-7.module+el8.2.0+5505+9f97be83

Vulnerabilities 1

  • Unscored —
    CVE-2019-13456

    In FreeRADIUS 3.0 through 3.0.19, on average 1 in every 2048 EAP-pwd handshakes fails because the password element cann…

    freeradius Debian