Summary
[3.0.20-3]
- Require make for proper bootstrap execution, removes post script
Resolves: bz#1672285
[3.0.20-2]
- Fix breakage caused by OpenSSL FIPS regression
Related: bz#1855822
Related: bz#1810911
Resolves: bz#1672285
[3.0.20-1]
- Update to FreeRADIUS server version 3.0.20
- Introduce Python 3 support; resolves: bz#1623069
- DoS issues due to multithreaded BN_CTX access; resolves: bz#1818809
- Create tmp files in /run; resolves: bz#1805975
Fixed packages 13
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | freeradius | 0:3.0.20-3.module+el8.3.0+7821+dc9b437c |
| Oracle Linux · 8 | freeradius-devel | 0:3.0.20-3.module+el8.3.0+7821+dc9b437c |
| Oracle Linux · 8 | freeradius-doc | 0:3.0.20-3.module+el8.3.0+7821+dc9b437c |
| Oracle Linux · 8 | freeradius-krb5 | 0:3.0.20-3.module+el8.3.0+7821+dc9b437c |
| Oracle Linux · 8 | freeradius-ldap | 0:3.0.20-3.module+el8.3.0+7821+dc9b437c |
| Oracle Linux · 8 | freeradius-mysql | 0:3.0.20-3.module+el8.3.0+7821+dc9b437c |
| Oracle Linux · 8 | freeradius-perl | 0:3.0.20-3.module+el8.3.0+7821+dc9b437c |
| Oracle Linux · 8 | freeradius-postgresql | 0:3.0.20-3.module+el8.3.0+7821+dc9b437c |
| Oracle Linux · 8 | freeradius-rest | 0:3.0.20-3.module+el8.3.0+7821+dc9b437c |
| Oracle Linux · 8 | freeradius-sqlite | 0:3.0.20-3.module+el8.3.0+7821+dc9b437c |
| Oracle Linux · 8 | freeradius-unixODBC | 0:3.0.20-3.module+el8.3.0+7821+dc9b437c |
| Oracle Linux · 8 | freeradius-utils | 0:3.0.20-3.module+el8.3.0+7821+dc9b437c |
| Oracle Linux · 8 | python3-freeradius | 0:3.0.20-3.module+el8.3.0+7821+dc9b437c |
Vulnerabilities 1
-
Unscored —
In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BN_CTX instance to handle all handshakes. T…