Oval Definition:	oval:org.opensuse.security:def:4862
Revision Date: 2020-12-02 Version: 1 Title: Security update for freeradius-server (Moderate) Description: This update for freeradius-server fixes the following issues: - CVE-2019-13456: Fixed a side-channel password leak in EAP-pwd (bsc#1144524). - CVE-2019-17185: Fixed a debial of service due to multithreaded BN_CTX access (bsc#1166847). - Fixed an issue in TLS-EAP where the OCSP verification, when an intermediate client certificate was not explicitly trusted (bsc#1146848). Family: unix Class: patch Status: Reference(s): 1024718 1027519 1046299 1050242 1050244 1051510 1055120 1055121 1055186 1058115 1060463 1061840 1065600 1065729 1068273 1078248 1079935 1082387 1082555 1082653 1083647 1085535 1086196 1086282 1086283 1086423 1087978 1088386 1089350 1090888 1091405 1091800 1094244 1097593 1097755 1100132 1102875 1102877 1102879 1102882 1102896 1103257 1103356 1103925 1104124 1104353 1104427 1104824 1104967 1105168 1105428 1106105 1106110 1106237 1106240 1106615 1106913 1107256 1107385 1107866 1108270 1108468 1109272 1109772 1109806 1110006 1110558 1110998 1111040 1111062 1111174 1111183 1111188 1111469 1111696 1111795 1111809 1111921 1112852 1112878 1112963 1113295 1113408 1113412 1113501 1113667 1113677 1113722 1113751 1113769 1113780 1113972 1114015 1114178 1114279 1114385 1114576 1114577 1114578 1114579 1114580 1114581 1114582 1114583 1114584 1114585 1114839 1114871 1115074 1115269 1115431 1115433 1115440 1115567 1115709 1115976 1116040 1116183 1116336 1116692 1116693 1116698 1116699 1116700 1116701 1116803 1116841 1116862 1116863 1116876 1116877 1116878 1116891 1116895 1116899 1116950 1117115 1117162 1117165 1117168 1117172 1117174 1117181 1117184 1117186 1117188 1117189 1117349 1117561 1117656 1117788 1117789 1117790 1117791 1117792 1117794 1117795 1117796 1117798 1117799 1117801 1117802 1117803 1117804 1117805 1117806 1117807 1117808 1117815 1117816 1117817 1117818 1117819 1117820 1117821 1117822 1117953 1118102 1118136 1118137 1118138 1118140 1118152 1118215 1118316 1118319 1118428 1118484 1118505 1118752 1118760 1118761 1118762 1118766 1118767 1118768 1118769 1118771 1118772 1118773 1118774 1118775 1118798 1118809 1118962 1119017 1119086 1119212 1119322 1119410 1119714 1119749 1119804 1119946 1119962 1119968 1120036 1120046 1120053 1120054 1120055 1120058 1120088 1120092 1120094 1120096 1120097 1120173 1120214 1120223 1120228 1120230 1120232 1120234 1120235 1120238 1120594 1120598 1120600 1120601 1120602 1120603 1120604 1120606 1120612 1120613 1120614 1120615 1120616 1120617 1120618 1120620 1120621 1120632 1120633 1120743 1120954 1121017 1121058 1121263 1121273 1121477 1121483 1121599 1121621 1121714 1121715 1121973 1144524 1146848 1162202 1162675 1162777 1163368 1166847 1169679 1169748 1171441 1171443 1171444 1171445 1171446 1171447 1171474 1171862 1172205 1173247 1173376 1173377 1173378 1173380 1173605 1174200 1177409 1177412 1177413 1177414 1178666 1178667 1178668 1178671 CVE-2011-3630 CVE-2011-3631 CVE-2011-3632 CVE-2012-0786 CVE-2013-0221 CVE-2013-0222 CVE-2013-0223 CVE-2013-1986 CVE-2018-12232 CVE-2018-12389 CVE-2018-12390 CVE-2018-12391 CVE-2018-12392 CVE-2018-12393 CVE-2018-14625 CVE-2018-16862 CVE-2018-16884 CVE-2018-18281 CVE-2018-18397 CVE-2018-18710 CVE-2018-19407 CVE-2018-19824 CVE-2018-19854 CVE-2018-19985 CVE-2018-20169 CVE-2018-9568 CVE-2019-13456 CVE-2019-17185 CVE-2019-18634 CVE-2020-0543 CVE-2020-11017 CVE-2020-11018 CVE-2020-11019 CVE-2020-11038 CVE-2020-11039 CVE-2020-11040 CVE-2020-11041 CVE-2020-11043 CVE-2020-11085 CVE-2020-11086 CVE-2020-11087 CVE-2020-11088 CVE-2020-11089 CVE-2020-11095 CVE-2020-11096 CVE-2020-11097 CVE-2020-11098 CVE-2020-11099 CVE-2020-11521 CVE-2020-11522 CVE-2020-11523 CVE-2020-11524 CVE-2020-11525 CVE-2020-11526 CVE-2020-12321 CVE-2020-12823 CVE-2020-13396 CVE-2020-13397 CVE-2020-13398 CVE-2020-15563 CVE-2020-15565 CVE-2020-15566 CVE-2020-15567 CVE-2020-25694 CVE-2020-25695 CVE-2020-25696 CVE-2020-27670 CVE-2020-27671 CVE-2020-27672 CVE-2020-27673 CVE-2020-4030 CVE-2020-4031 CVE-2020-4032 CVE-2020-4033 CVE-2020-6792 CVE-2020-6793 CVE-2020-6794 CVE-2020-6795 CVE-2020-6797 CVE-2020-6798 CVE-2020-6800 SUSE-SU-2018:3769-1 SUSE-SU-2019:0224-1 SUSE-SU-2020:0385-1 SUSE-SU-2020:0408-1 SUSE-SU-2020:1023-1 SUSE-SU-2020:1889-1 SUSE-SU-2020:1930-1 SUSE-SU-2020:2068-1 SUSE-SU-2020:3052-1 SUSE-SU-2020:3349-1 SUSE-SU-2020:3455-1 Platform(s): SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise High Availability 12 SUSE Linux Enterprise High Availability 12 SP1 SUSE Linux Enterprise High Availability 12 SP2 SUSE Linux Enterprise High Availability 12 SP3 SUSE Linux Enterprise High Availability 12 SP4 SUSE Linux Enterprise High Availability 12 SP5 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Live Patching 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE OpenStack Cloud 5 Product(s): Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information libfreebl3-3.15.3-0.3.1 is installed OR libfreebl3-32bit-3.15.3-0.3.1 is installed OR mozilla-nspr-4.10.2-0.3.1 is installed OR mozilla-nspr-32bit-4.10.2-0.3.1 is installed OR mozilla-nss-3.15.3-0.3.1 is installed OR mozilla-nss-32bit-3.15.3-0.3.1 is installed OR mozilla-nss-tools-3.15.3-0.3.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information coreutils-8.22-5 is installed OR coreutils-lang-8.22-5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information DirectFB-1.7.1-4 is installed OR lib++dfb-1_7-1-1.7.1-4 is installed OR libdirectfb-1_7-1-1.7.1-4 is installed OR libdirectfb-1_7-1-32bit-1.7.1-4 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information alsa-1.0.27.2-11 is installed OR libasound2-1.0.27.2-11 is installed OR libasound2-32bit-1.0.27.2-11 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information audiofile-0.3.6-10 is installed OR libaudiofile1-0.3.6-10 is installed OR libaudiofile1-32bit-0.3.6-10 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND bogofilter-1.2.4-5 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 is installed AND Package Information ctdb-4.2.4-18.44.2 is installed OR samba-4.2.4-18.44.2 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP1 is installed AND Package Information ctdb-4.2.4-28.24.1 is installed OR samba-4.2.4-28.24.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP2 is installed AND Package Information cluster-md-kmp-default-4.4.21-69 is installed OR cluster-network-kmp-default-4.4.21-69 is installed OR dlm-kmp-default-4.4.21-69 is installed OR gfs2-kmp-default-4.4.21-69 is installed OR ocfs2-kmp-default-4.4.21-69 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP3 is installed AND Package Information ctdb-4.6.7+git.38.90b2cdb4f22-3.7.1 is installed OR ldirectord-4.0.1+git.1495055229.643177f1-2.4.2 is installed OR monitoring-plugins-metadata-4.0.1+git.1495055229.643177f1-2.4.2 is installed OR resource-agents-4.0.1+git.1495055229.643177f1-2.4.2 is installed OR samba-4.6.7+git.38.90b2cdb4f22-3.7.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP4 is installed AND Package Information cluster-md-kmp-default-4.12.14-94.41 is installed OR dlm-kmp-default-4.12.14-94.41 is installed OR gfs2-kmp-default-4.12.14-94.41 is installed OR ocfs2-kmp-default-4.12.14-94.41 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP5 is installed AND ctdb-4.10.5+git.129.35f7bb6e177-1 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND Package Information PackageKit-1.1.3-24.9 is installed OR PackageKit-backend-zypp-1.1.3-24.9 is installed OR PackageKit-lang-1.1.3-24.9 is installed OR libpackagekit-glib2-18-1.1.3-24.9 is installed OR typelib-1_0-PackageKitGlib-1_0-1.1.3-24.9 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 is installed AND Package Information kgraft-patch-3_12_39-47-default-1-2.1 is installed OR kgraft-patch-3_12_39-47-xen-1-2.1 is installed OR kgraft-patch-SLE12_Update_4-1-2.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Containers 12 is installed AND sles12-docker-image-1.1.1-20160307082632 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information freeradius-server-3.0.16-3.6 is installed OR freeradius-server-devel-3.0.16-3.6 is installed OR freeradius-server-krb5-3.0.16-3.6 is installed OR freeradius-server-ldap-3.0.16-3.6 is installed OR freeradius-server-libs-3.0.16-3.6 is installed OR freeradius-server-mysql-3.0.16-3.6 is installed OR freeradius-server-perl-3.0.16-3.6 is installed OR freeradius-server-postgresql-3.0.16-3.6 is installed OR freeradius-server-python-3.0.16-3.6 is installed OR freeradius-server-sqlite-3.0.16-3.6 is installed OR freeradius-server-utils-3.0.16-3.6 is installed Definition Synopsis SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT is installed AND sudo-1.8.10p3-10.23 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2 is installed AND Package Information libpng12-0-1.2.31-5.25.1 is installed OR libpng12-0-32bit-1.2.31-5.25.1 is installed OR libpng12-0-x86-1.2.31-5.25.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND Package Information PolicyKit-0.9-14.41.1 is installed OR PolicyKit-32bit-0.9-14.41.1 is installed OR PolicyKit-doc-0.9-14.39.2 is installed OR PolicyKit-x86-0.9-14.41.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3-LTSS is installed AND Package Information java-1_6_0-ibm-1.6.0_sr16.20-51.1 is installed OR java-1_6_0-ibm-alsa-1.6.0_sr16.20-51.1 is installed OR java-1_6_0-ibm-devel-1.6.0_sr16.20-51.1 is installed OR java-1_6_0-ibm-fonts-1.6.0_sr16.20-51.1 is installed OR java-1_6_0-ibm-jdbc-1.6.0_sr16.20-51.1 is installed OR java-1_6_0-ibm-plugin-1.6.0_sr16.20-51.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information ntp-4.2.6p5-31.1 is installed OR ntp-doc-4.2.6p5-31.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND procmail-3.22-267 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information DirectFB-1.7.1-6 is installed OR lib++dfb-1_7-1-1.7.1-6 is installed OR libdirectfb-1_7-1-1.7.1-6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information apache-commons-beanutils-1.9.2-1 is installed OR apache-commons-beanutils-javadoc-1.9.2-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND apache2-mod_jk-1.2.40-5 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information kgraft-patch-3_12_51-52_34-default-5-2.2 is installed OR kgraft-patch-3_12_51-52_34-xen-5-2.2 is installed OR kgraft-patch-SLE12_Update_10-5-2.2 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information ghostscript-9.15-17 is installed OR ghostscript-x11-9.15-17 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information xen-4.10.4_18-3.44 is installed OR xen-devel-4.10.4_18-3.44 is installed OR xen-libs-4.10.4_18-3.44 is installed OR xen-tools-4.10.4_18-3.44 is installed OR xen-tools-domU-4.10.4_18-3.44 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information python-32bit-2.6.9-0.25.1 is installed OR python-demo-2.6.9-0.25.1 is installed OR python-devel-2.6.9-0.25.1 is installed OR python-doc-2.6-8.25.1 is installed OR python-doc-pdf-2.6-8.25.1 is installed OR python-gdbm-2.6.9-0.25.1 is installed OR python-idle-2.6.9-0.25.1 is installed OR python-tk-2.6.9-0.25.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND kernel-docs-3.0.101-65.3 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND libtag-devel-1.9.1-1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information ant-1.9.4-1 is installed OR ant-jmf-1.9.4-1 is installed OR ant-scripts-1.9.4-1 is installed OR ant-swing-1.9.4-1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information DirectFB-devel-1.7.1-6 is installed OR lib++dfb-devel-1.7.1-6 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND LibVNCServer-devel-0.9.9-16 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information MozillaThunderbird-60.3.0-3.17 is installed OR MozillaThunderbird-translations-common-60.3.0-3.17 is installed OR MozillaThunderbird-translations-other-60.3.0-3.17 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information openconnect-7.08-6.9 is installed OR openconnect-devel-7.08-6.9 is installed OR openconnect-lang-7.08-6.9 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP2 is installed AND Package Information freerdp-2.1.2-15.7 is installed OR freerdp-devel-2.1.2-15.7 is installed OR libfreerdp2-2.1.2-15.7 is installed OR libwinpr2-2.1.2-15.7 is installed OR winpr2-devel-2.1.2-15.7 is installed
BACK