Fixed packages 26
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 7 enterprise_linux:7::server | freeradius | 0:3.0.13-15.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::server | freeradius-debuginfo | 0:3.0.13-15.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::server | freeradius-devel | 0:3.0.13-15.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::server | freeradius-doc | 0:3.0.13-15.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::server | freeradius-krb5 | 0:3.0.13-15.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::server | freeradius-ldap | 0:3.0.13-15.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::server | freeradius-mysql | 0:3.0.13-15.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::server | freeradius-perl | 0:3.0.13-15.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::server | freeradius-postgresql | 0:3.0.13-15.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::server | freeradius-python | 0:3.0.13-15.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::server | freeradius-sqlite | 0:3.0.13-15.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::server | freeradius-unixODBC | 0:3.0.13-15.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::server | freeradius-utils | 0:3.0.13-15.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | freeradius | 0:3.0.13-15.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | freeradius-debuginfo | 0:3.0.13-15.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | freeradius-devel | 0:3.0.13-15.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | freeradius-doc | 0:3.0.13-15.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | freeradius-krb5 | 0:3.0.13-15.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | freeradius-ldap | 0:3.0.13-15.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | freeradius-mysql | 0:3.0.13-15.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | freeradius-perl | 0:3.0.13-15.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | freeradius-postgresql | 0:3.0.13-15.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | freeradius-python | 0:3.0.13-15.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | freeradius-sqlite | 0:3.0.13-15.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | freeradius-unixODBC | 0:3.0.13-15.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | freeradius-utils | 0:3.0.13-15.el7 |
Vulnerabilities 3
-
Medium 6.4
It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a loca…
-
Unscored —
In FreeRADIUS 3.0 through 3.0.19, on average 1 in every 2048 EAP-pwd handshakes fails because the password element cann…
-
Unscored —
In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BN_CTX instance to handle all handshakes. T…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
article
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1592741
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1630684
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1677435
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1705340
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1737663
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1816680
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3984.json
-
report
https://access.redhat.com/security/cve/CVE-2019-10143
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-10143
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-10143
-
report
https://access.redhat.com/security/cve/CVE-2019-13456
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-13456
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-13456
-
report
https://access.redhat.com/security/cve/CVE-2019-17185
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-17185
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-17185