Oval Definition:oval:org.opensuse.security:def:5428
Revision Date:2020-12-02Version:1
Title:Security update for freeradius-server (Moderate)
Description:

This update for freeradius-server fixes the following issues:

- CVE-2019-13456: Fixed a side-channel password leak in EAP-pwd (bsc#1144524). - CVE-2019-17185: Fixed a debial of service due to multithreaded BN_CTX access (bsc#1166847). - Fixed an issue in TLS-EAP where the OCSP verification, when an intermediate client certificate was not explicitly trusted (bsc#1146848).
Family:unixClass:patch
Status:Reference(s):1144524
1146848
1166847
1166916
1172442
1172443
CVE-2006-2607
CVE-2008-2109
CVE-2008-3825
CVE-2009-1384
CVE-2009-2473
CVE-2009-2474
CVE-2009-2905
CVE-2010-0424
CVE-2011-0460
CVE-2012-1616
CVE-2013-1992
CVE-2014-2892
CVE-2014-5461
CVE-2015-0247
CVE-2015-1572
CVE-2015-5198
CVE-2015-5199
CVE-2015-5200
CVE-2015-7555
CVE-2016-3977
CVE-2019-13456
CVE-2019-17185
CVE-2020-11080
CVE-2020-7598
CVE-2020-8174
SUSE-SU-2020:1023-1
SUSE-SU-2020:1576-1
Platform(s):openSUSE 13.1
SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 11 SP4
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise for SAP 12
SUSE Linux Enterprise for SAP 12 SP1
SUSE Linux Enterprise for SAP 12 SP2
SUSE Linux Enterprise High Performance Computing 12 SP5
SUSE Linux Enterprise Live Patching 12
SUSE Linux Enterprise Live Patching 12 SP3
SUSE Linux Enterprise Module for Advanced Systems Management 12
SUSE Linux Enterprise Module for Containers 12
SUSE Linux Enterprise Module for High Performance Computing 12
SUSE Linux Enterprise Module for Legacy Software 12
SUSE Linux Enterprise Module for Public Cloud 12
SUSE Linux Enterprise Module for Web Scripting 12
SUSE Linux Enterprise Server 11
SUSE Linux Enterprise Server 11 SP1-LTSS
SUSE Linux Enterprise Server 11 SP2
SUSE Linux Enterprise Server 11 SP3
SUSE Linux Enterprise Server 11 SP4
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server for SAP Applications 12 SP1
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Software Development Kit 11 SP4
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Software Development Kit 12 SP3
SUSE Linux Enterprise Software Development Kit 12 SP4
SUSE Linux Enterprise Workstation Extension 12
SUSE Linux Enterprise Workstation Extension 12 SP1
SUSE OpenStack Cloud 5
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP3 is installed
  • AND Package Information
  • libldap-2_4-2-2.4.26-0.62.2 is installed
  • OR libldap-2_4-2-32bit-2.4.26-0.62.2 is installed
  • OR openldap2-client-2.4.26-0.62.2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP4 is installed
  • AND libksba-1.0.4-1.20.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP1 is installed
  • AND libdmx1-1.1.3-3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP2 is installed
  • AND argyllcms-1.6.3-3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND Package Information
  • DirectFB-1.7.1-6 is installed
  • OR lib++dfb-1_7-1-1.7.1-6 is installed
  • OR libdirectfb-1_7-1-1.7.1-6 is installed
  • OR libdirectfb-1_7-1-32bit-1.7.1-6 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • AND Package Information
  • ImageMagick-6.8.8.1-71.85 is installed
  • OR libMagick++-6_Q16-3-6.8.8.1-71.85 is installed
  • OR libMagickCore-6_Q16-1-6.8.8.1-71.85 is installed
  • OR libMagickCore-6_Q16-1-32bit-6.8.8.1-71.85 is installed
  • OR libMagickWand-6_Q16-1-6.8.8.1-71.85 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise for SAP 12 is installed
  • AND Package Information
  • kgraft-patch-3_12_51-52_34-default-6-2.1 is installed
  • OR kgraft-patch-3_12_51-52_34-xen-6-2.1 is installed
  • OR kgraft-patch-SLE12_Update_10-6-2.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise for SAP 12 SP1 is installed
  • AND Package Information
  • compat-openssl098-0.9.8j-102.1 is installed
  • OR libopenssl0_9_8-0.9.8j-102.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise for SAP 12 SP2 is installed
  • AND cryptctl-1.2.6-5.3.11 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Performance Computing 12 SP5 is installed
  • AND Package Information
  • curl-7.60.0-9 is installed
  • OR libcurl4-7.60.0-9 is installed
  • OR libcurl4-32bit-7.60.0-9 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Live Patching 12 is installed
  • AND Package Information
  • kgraft-patch-4_4_74-92_29-default-7-2 is installed
  • OR kgraft-patch-SLE12-SP2_Update_10-7-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Live Patching 12 SP3 is installed
  • AND Package Information
  • kgraft-patch-4_4_73-5-default-2-2.3.2 is installed
  • OR kgraft-patch-SLE12-SP3_Update_0-2-2.3.2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed
  • AND Package Information
  • puppet-3.8.5-15.9.1 is installed
  • OR puppet-server-3.8.5-15.9.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Containers 12 is installed
  • AND Package Information
  • ruby2.1-rubygem-passenger-5.0.18-6.1 is installed
  • OR rubygem-passenger-5.0.18-6.1 is installed
  • OR rubygem-passenger-apache2-5.0.18-6.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for High Performance Computing 12 is installed
  • AND Package Information
  • libslurm29-16.05.8.1-5 is installed
  • OR perl-slurm-16.05.8.1-5 is installed
  • OR slurm-16.05.8.1-5 is installed
  • OR slurm-auth-none-16.05.8.1-5 is installed
  • OR slurm-devel-16.05.8.1-5 is installed
  • OR slurm-doc-16.05.8.1-5 is installed
  • OR slurm-lua-16.05.8.1-5 is installed
  • OR slurm-munge-16.05.8.1-5 is installed
  • OR slurm-pam_slurm-16.05.8.1-5 is installed
  • OR slurm-plugins-16.05.8.1-5 is installed
  • OR slurm-sched-wiki-16.05.8.1-5 is installed
  • OR slurm-slurmdbd-16.05.8.1-5 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Legacy Software 12 is installed
  • AND Package Information
  • cups154-1.5.4-5.1 is installed
  • OR cups154-client-1.5.4-5.1 is installed
  • OR cups154-filters-1.5.4-5.1 is installed
  • OR cups154-libs-1.5.4-5.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Public Cloud 12 is installed
  • AND Package Information
  • kernel-ec2-3.12.32-33.1 is installed
  • OR kernel-ec2-devel-3.12.32-33.1 is installed
  • OR kernel-ec2-extra-3.12.32-33.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Web Scripting 12 is installed
  • AND python3-3.4.1-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 11 is installed
  • AND Package Information
  • libmysqlclient15-5.0.67-13.26.1 is installed
  • OR libmysqlclient15-32bit-5.0.67-13.26.1 is installed
  • OR libmysqlclient15-x86-5.0.67-13.26.1 is installed
  • OR libmysqlclient_r15-5.0.67-13.26.1 is installed
  • OR mysql-5.0.67-13.26.1 is installed
  • OR mysql-Max-5.0.67-13.26.1 is installed
  • OR mysql-client-5.0.67-13.26.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP1-LTSS is installed
  • AND Package Information
  • bash-3.2-147.14.22.1 is installed
  • OR bash-doc-3.2-147.14.22.1 is installed
  • OR libreadline5-5.2-147.14.22.1 is installed
  • OR libreadline5-32bit-5.2-147.14.22.1 is installed
  • OR readline-doc-5.2-147.14.22.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP2 is installed
  • AND Package Information
  • curl-7.19.7-1.18.1 is installed
  • OR libcurl4-7.19.7-1.18.1 is installed
  • OR libcurl4-32bit-7.19.7-1.18.1 is installed
  • OR libcurl4-x86-7.19.7-1.18.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP3 is installed
  • AND LibVNCServer-0.9.1-154.24 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP4 is installed
  • AND Package Information
  • xen-4.4.2_08-1.7 is installed
  • OR xen-doc-html-4.4.2_08-1.7 is installed
  • OR xen-kmp-default-4.4.2_08_3.0.101_63-1.7 is installed
  • OR xen-kmp-pae-4.4.2_08_3.0.101_63-1.7 is installed
  • OR xen-libs-4.4.2_08-1.7 is installed
  • OR xen-libs-32bit-4.4.2_08-1.7 is installed
  • OR xen-tools-4.4.2_08-1.7 is installed
  • OR xen-tools-domU-4.4.2_08-1.7 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 is installed
  • AND Package Information
  • accountsservice-0.6.35-1 is installed
  • OR accountsservice-lang-0.6.35-1 is installed
  • OR libaccountsservice0-0.6.35-1 is installed
  • OR typelib-1_0-AccountsService-1_0-0.6.35-1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1 is installed
  • AND autofs-5.0.9-8 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND sudo-1.8.10p3-8.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND Package Information
  • libpcsclite1-1.8.10-6 is installed
  • OR pcsc-lite-1.8.10-6 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND Package Information
  • bzip2-1.0.6-29 is installed
  • OR bzip2-doc-1.0.6-29 is installed
  • OR libbz2-1-1.0.6-29 is installed
  • OR libbz2-1-32bit-1.0.6-29 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed
  • AND Package Information
  • e2fsprogs-1.42.11-7 is installed
  • OR libcom_err2-1.42.11-7 is installed
  • OR libext2fs2-1.42.11-7 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 12 is installed
  • AND Package Information
  • kgraft-patch-3_12_55-52_42-default-7-2 is installed
  • OR kgraft-patch-3_12_55-52_42-xen-7-2 is installed
  • OR kgraft-patch-SLE12_Update_12-7-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed
  • AND Package Information
  • bind-9.9.9P1-62 is installed
  • OR bind-chrootenv-9.9.9P1-62 is installed
  • OR bind-devel-9.9.9P1-62 is installed
  • OR bind-doc-9.9.9P1-62 is installed
  • OR bind-libs-9.9.9P1-62 is installed
  • OR bind-libs-32bit-9.9.9P1-62 is installed
  • OR bind-utils-9.9.9P1-62 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 15 is installed
  • AND Package Information
  • freeradius-server-3.0.16-3.6 is installed
  • OR freeradius-server-devel-3.0.16-3.6 is installed
  • OR freeradius-server-krb5-3.0.16-3.6 is installed
  • OR freeradius-server-ldap-3.0.16-3.6 is installed
  • OR freeradius-server-libs-3.0.16-3.6 is installed
  • OR freeradius-server-mysql-3.0.16-3.6 is installed
  • OR freeradius-server-perl-3.0.16-3.6 is installed
  • OR freeradius-server-postgresql-3.0.16-3.6 is installed
  • OR freeradius-server-python-3.0.16-3.6 is installed
  • OR freeradius-server-sqlite-3.0.16-3.6 is installed
  • OR freeradius-server-utils-3.0.16-3.6 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 11 SP4 is installed
  • AND Package Information
  • apache2-mod_perl-2.0.4-40.24.1 is installed
  • OR apache2-mod_perl-devel-2.0.4-40.24.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 is installed
  • AND augeas-devel-1.2.0-1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 SP3 is installed
  • AND libarchive-devel-3.1.2-25 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 SP4 is installed
  • AND apache2-devel-2.4.23-29.24 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 12 is installed
  • AND bash-lang-4.2-75 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 12 SP1 is installed
  • AND Package Information
  • flash-player-11.2.202.559-117.1 is installed
  • OR flash-player-gnome-11.2.202.559-117.1 is installed
    • BACK