Summary
[3.0.20-14]
- Fix defect found by Covscan
Resolves: #2151704
[3.0.20-13]
- Fix multiple CVEs
- Add rpminspect configuration
Resolves: #2151702
Resolves: #2151704
Resolves: #2151706
Fixed packages 13
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | freeradius | 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 |
| Oracle Linux · 8 | freeradius-devel | 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 |
| Oracle Linux · 8 | freeradius-doc | 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 |
| Oracle Linux · 8 | freeradius-krb5 | 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 |
| Oracle Linux · 8 | freeradius-ldap | 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 |
| Oracle Linux · 8 | freeradius-mysql | 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 |
| Oracle Linux · 8 | freeradius-perl | 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 |
| Oracle Linux · 8 | freeradius-postgresql | 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 |
| Oracle Linux · 8 | freeradius-rest | 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 |
| Oracle Linux · 8 | freeradius-sqlite | 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 |
| Oracle Linux · 8 | freeradius-unixODBC | 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 |
| Oracle Linux · 8 | freeradius-utils | 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 |
| Oracle Linux · 8 | python3-freeradius | 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 |
Vulnerabilities 3
-
High 7.5
In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an att…
-
High 7.5
In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in th…
-
Medium 6.5
A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which c…