| Revision Date: | 2020-12-01 | Version: | 1 |
| Title: | Security update for freeradius-server (Moderate) |
| Description: |
This update for freeradius-server fixes the following issues:
- CVE-2019-13456: Fixed a side-channel password leak in EAP-pwd (bsc#1144524). - CVE-2019-17185: Fixed a debial of service due to multithreaded BN_CTX access (bsc#1166847). - Fixed an issue in TLS-EAP where the OCSP verification, when an intermediate client certificate was not explicitly trusted (bsc#1146848).
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1010514
1010829
1012266
1014560
1014566
1020601
1028301
1046856
1144524
1146848
1166847
1168994
1173812
1174463
1174570
866010
901905
907290
921559
923240
928749
930565
933396
983232
983234
983253
983259
983292
983305
983308
983521
983523
983527
983533
983739
983746
983752
983774
983794
983796
983799
983803
984014
984018
984023
984028
984032
984035
984135
984137
984142
984144
984145
984149
984150
984160
984166
984172
984179
984181
984183
984184
984185
984186
984187
984191
984193
984370
984372
984373
984374
984375
984379
984394
984398
984400
984401
984404
984406
984408
984409
984427
984433
984436
985442
985448
985451
985456
985460
986608
986609
997682
CVE-2011-0421
CVE-2011-2054
CVE-2011-3172
CVE-2012-1162
CVE-2012-1163
CVE-2012-1616
CVE-2013-2062
CVE-2014-0172
CVE-2014-9447
CVE-2014-9622
CVE-2014-9805
CVE-2014-9806
CVE-2014-9807
CVE-2014-9808
CVE-2014-9809
CVE-2014-9810
CVE-2014-9811
CVE-2014-9812
CVE-2014-9813
CVE-2014-9814
CVE-2014-9815
CVE-2014-9816
CVE-2014-9817
CVE-2014-9818
CVE-2014-9819
CVE-2014-9820
CVE-2014-9821
CVE-2014-9822
CVE-2014-9823
CVE-2014-9824
CVE-2014-9825
CVE-2014-9826
CVE-2014-9828
CVE-2014-9829
CVE-2014-9830
CVE-2014-9831
CVE-2014-9832
CVE-2014-9833
CVE-2014-9834
CVE-2014-9835
CVE-2014-9836
CVE-2014-9837
CVE-2014-9838
CVE-2014-9839
CVE-2014-9840
CVE-2014-9841
CVE-2014-9842
CVE-2014-9843
CVE-2014-9844
CVE-2014-9845
CVE-2014-9846
CVE-2014-9847
CVE-2014-9848
CVE-2014-9849
CVE-2014-9850
CVE-2014-9851
CVE-2014-9852
CVE-2014-9853
CVE-2014-9854
CVE-2015-2331
CVE-2015-2331
CVE-2015-4041
CVE-2015-4042
CVE-2015-8894
CVE-2015-8895
CVE-2015-8896
CVE-2015-8897
CVE-2015-8898
CVE-2015-8900
CVE-2015-8901
CVE-2015-8902
CVE-2015-8903
CVE-2016-10156
CVE-2016-4562
CVE-2016-4563
CVE-2016-4564
CVE-2016-5687
CVE-2016-5688
CVE-2016-5689
CVE-2016-5690
CVE-2016-5691
CVE-2016-5841
CVE-2016-5842
CVE-2016-9445
CVE-2016-9446
CVE-2016-9447
CVE-2017-1000083
CVE-2017-14107
CVE-2017-6508
CVE-2019-13456
CVE-2019-17185
CVE-2020-10713
CVE-2020-14308
CVE-2020-14309
CVE-2020-14310
CVE-2020-14311
CVE-2020-15706
CVE-2020-15707
SUSE-SU-2015:0668-1
SUSE-SU-2015:1637-1
SUSE-SU-2016:1784-1
SUSE-SU-2017:0027-1
SUSE-SU-2017:0279-1
SUSE-SU-2017:0800-1
SUSE-SU-2017:2390-1
SUSE-SU-2020:1023-1
SUSE-SU-2020:2074-1
|
| Platform(s): | openSUSE Leap 15.0
openSUSE Leap 15.1
SUSE Linux Enterprise Desktop 11 SP2
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 11 SP4
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise Module for Server Applications 15 SP1
SUSE Linux Enterprise Module for Server Applications 15 SP2
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-BCL
SUSE Linux Enterprise Server 12 SP3-ESPOS
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE OpenStack Cloud 6
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud 9
SUSE OpenStack Cloud Crowbar 8
| Product(s): | |
| Definition Synopsis |
| openSUSE Leap 15.0 is installed AND Package Information
flatpak-0.10.4-lp150.2 is installed
OR libflatpak0-0.10.4-lp150.2 is installed
OR typelib-1_0-Flatpak-1_0-0.10.4-lp150.2 is installed
|
| Definition Synopsis |
| openSUSE Leap 15.1 is installed
AND Package Information
libxslt-1.1.32-lp151.3.3 is installed
OR libxslt-devel-1.1.32-lp151.3.3 is installed
OR libxslt-devel-32bit-1.1.32-lp151.3.3 is installed
OR libxslt-python-1.1.32-lp151.3.3 is installed
OR libxslt-tools-1.1.32-lp151.3.3 is installed
OR libxslt1-1.1.32-lp151.3.3 is installed
OR libxslt1-32bit-1.1.32-lp151.3.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 11 SP2 is installed
AND Package Information
MozillaFirefox-10.0.11-0.3 is installed
OR MozillaFirefox-translations-10.0.11-0.3 is installed
OR libfreebl3-3.14-0.3 is installed
OR libfreebl3-32bit-3.14-0.3 is installed
OR mozilla-nss-3.14-0.3 is installed
OR mozilla-nss-32bit-3.14-0.3 is installed
OR mozilla-nss-tools-3.14-0.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 11 SP3 is installed
AND Package Information
gtk2-2.18.9-0.39 is installed
OR gtk2-32bit-2.18.9-0.39 is installed
OR gtk2-lang-2.18.9-0.39 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 11 SP4 is installed
AND Package Information
bind-9.9.6P1-0.22 is installed
OR bind-libs-9.9.6P1-0.22 is installed
OR bind-libs-32bit-9.9.6P1-0.22 is installed
OR bind-utils-9.9.6P1-0.22 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 is installed
AND Package Information
libzip-0.11.1-6 is installed
OR libzip2-0.11.1-6 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP1 is installed
AND Package Information
ImageMagick-6.8.8.1-30 is installed
OR libMagick++-6_Q16-3-6.8.8.1-30 is installed
OR libMagickCore-6_Q16-1-6.8.8.1-30 is installed
OR libMagickCore-6_Q16-1-32bit-6.8.8.1-30 is installed
OR libMagickWand-6_Q16-1-6.8.8.1-30 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP2 is installed
AND Package Information
pam-modules-12.1-23 is installed
OR pam-modules-32bit-12.1-23 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP3 is installed
AND argyllcms-1.6.3-3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP4 is installed
AND libzip2-0.11.1-13.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed
AND Package Information
freeradius-server-3.0.16-3.6 is installed
OR freeradius-server-devel-3.0.16-3.6 is installed
OR freeradius-server-krb5-3.0.16-3.6 is installed
OR freeradius-server-ldap-3.0.16-3.6 is installed
OR freeradius-server-libs-3.0.16-3.6 is installed
OR freeradius-server-mysql-3.0.16-3.6 is installed
OR freeradius-server-perl-3.0.16-3.6 is installed
OR freeradius-server-postgresql-3.0.16-3.6 is installed
OR freeradius-server-python-3.0.16-3.6 is installed
OR freeradius-server-sqlite-3.0.16-3.6 is installed
OR freeradius-server-utils-3.0.16-3.6 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Server Applications 15 SP2 is installed
AND Package Information
grub2-2.04-9.7 is installed
OR grub2-x86_64-xen-2.04-9.7 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP1 is installed
AND Package Information
DirectFB-1.7.1-4 is installed
OR lib++dfb-1_7-1-1.7.1-4 is installed
OR libdirectfb-1_7-1-1.7.1-4 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP1-LTSS is installed
AND Package Information
kgraft-patch-3_12_74-60_64_57-default-11-2 is installed
OR kgraft-patch-3_12_74-60_64_57-xen-11-2 is installed
OR kgraft-patch-SLE12-SP1_Update_20-11-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2 is installed
AND Package Information
libmpfr4-3.1.2-7 is installed
OR libmpfr4-32bit-3.1.2-7 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-BCL is installed
AND Package Information
libssh2-1-1.4.3-20.14 is installed
OR libssh2-1-32bit-1.4.3-20.14 is installed
OR libssh2_org-1.4.3-20.14 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
AND Package Information
kgraft-patch-4_4_121-92_73-default-7-2 is installed
OR kgraft-patch-SLE12-SP2_Update_21-7-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-LTSS is installed
AND Package Information
openssh-7.2p2-74.42 is installed
OR openssh-askpass-gnome-7.2p2-74.42 is installed
OR openssh-fips-7.2p2-74.42 is installed
OR openssh-helpers-7.2p2-74.42 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3 is installed
AND Package Information
automake-1.13.4-6 is installed
OR m4-1.4.16-15 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-BCL is installed
AND Package Information
libpcap-1.8.1-10.3 is installed
OR libpcap1-1.8.1-10.3 is installed
OR tcpdump-4.9.2-14.14 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-ESPOS is installed
AND Package Information
glibc-2.22-62.22 is installed
OR glibc-32bit-2.22-62.22 is installed
OR glibc-devel-2.22-62.22 is installed
OR glibc-devel-32bit-2.22-62.22 is installed
OR glibc-html-2.22-62.22 is installed
OR glibc-i18ndata-2.22-62.22 is installed
OR glibc-info-2.22-62.22 is installed
OR glibc-locale-2.22-62.22 is installed
OR glibc-locale-32bit-2.22-62.22 is installed
OR glibc-profile-2.22-62.22 is installed
OR glibc-profile-32bit-2.22-62.22 is installed
OR nscd-2.22-62.22 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-LTSS is installed
AND Package Information
kgraft-patch-4_4_176-94_88-default-5-2 is installed
OR kgraft-patch-SLE12-SP3_Update_24-5-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
AND Package Information
libXcursor-1.1.14-4.6 is installed
OR libXcursor1-1.1.14-4.6 is installed
OR libXcursor1-32bit-1.1.14-4.6 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP4 is installed
AND axis-1.4-290.3 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 6 is installed
AND ruby2.1-rubygem-railties-4_2-4.2.2-2 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 7 is installed
AND clamav-0.100.2-33.18 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 8 is installed
AND Package Information
kernel-default-4.4.180-94.100 is installed
OR kernel-default-base-4.4.180-94.100 is installed
OR kernel-default-devel-4.4.180-94.100 is installed
OR kernel-devel-4.4.180-94.100 is installed
OR kernel-macros-4.4.180-94.100 is installed
OR kernel-source-4.4.180-94.100 is installed
OR kernel-syms-4.4.180-94.100 is installed
OR kgraft-patch-4_4_180-94_100-default-1-4.3 is installed
OR kgraft-patch-SLE12-SP3_Update_27-1-4.3 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 9 is installed
AND python-Django1-1.11.20-3.6 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud Crowbar 8 is installed
AND Package Information
libjpeg-turbo-1.5.3-31.19 is installed
OR libjpeg62-62.2.0-31.19 is installed
OR libjpeg62-32bit-62.2.0-31.19 is installed
OR libjpeg62-turbo-1.5.3-31.19 is installed
OR libjpeg8-8.1.2-31.19 is installed
OR libjpeg8-32bit-8.1.2-31.19 is installed
OR libturbojpeg0-8.1.2-31.19 is installed
|