Moderate: freeradius:3.0 security and bug fix update

2020-11-0312:37:04

errata.almalinux.org

0.003 Low

EPSS

Percentile

68.6%

JSON

FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network.

Security Fix(es):

freeradius: eap-pwd: DoS issues due to multithreaded BN_CTX access (CVE-2019-17185)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8x86_64freeradius< 3.0.20-3.module_el8.3.0+2067+67902674freeradius-3.0.20-3.module_el8.3.0+2067+67902674.x86_64.rpm
almalinux8x86_64freeradius-devel< 3.0.20-3.module_el8.3.0+2067+67902674freeradius-devel-3.0.20-3.module_el8.3.0+2067+67902674.x86_64.rpm
almalinux8x86_64freeradius-doc< 3.0.20-3.module_el8.3.0+2067+67902674freeradius-doc-3.0.20-3.module_el8.3.0+2067+67902674.x86_64.rpm
almalinux8x86_64freeradius-krb5< 3.0.20-3.module_el8.3.0+2067+67902674freeradius-krb5-3.0.20-3.module_el8.3.0+2067+67902674.x86_64.rpm
almalinux8x86_64freeradius-ldap< 3.0.20-3.module_el8.3.0+2067+67902674freeradius-ldap-3.0.20-3.module_el8.3.0+2067+67902674.x86_64.rpm
almalinux8x86_64freeradius-mysql< 3.0.20-3.module_el8.3.0+2067+67902674freeradius-mysql-3.0.20-3.module_el8.3.0+2067+67902674.x86_64.rpm
almalinux8x86_64freeradius-perl< 3.0.20-3.module_el8.3.0+2067+67902674freeradius-perl-3.0.20-3.module_el8.3.0+2067+67902674.x86_64.rpm
almalinux8x86_64freeradius-postgresql< 3.0.20-3.module_el8.3.0+2067+67902674freeradius-postgresql-3.0.20-3.module_el8.3.0+2067+67902674.x86_64.rpm
almalinux8x86_64freeradius-rest< 3.0.20-3.module_el8.3.0+2067+67902674freeradius-rest-3.0.20-3.module_el8.3.0+2067+67902674.x86_64.rpm
almalinux8x86_64freeradius-sqlite< 3.0.20-3.module_el8.3.0+2067+67902674freeradius-sqlite-3.0.20-3.module_el8.3.0+2067+67902674.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	x86_64	freeradius	< 3.0.20-3.module_el8.3.0+2067+67902674	freeradius-3.0.20-3.module_el8.3.0+2067+67902674.x86_64.rpm
almalinux	8	x86_64	freeradius-devel	< 3.0.20-3.module_el8.3.0+2067+67902674	freeradius-devel-3.0.20-3.module_el8.3.0+2067+67902674.x86_64.rpm
almalinux	8	x86_64	freeradius-doc	< 3.0.20-3.module_el8.3.0+2067+67902674	freeradius-doc-3.0.20-3.module_el8.3.0+2067+67902674.x86_64.rpm
almalinux	8	x86_64	freeradius-krb5	< 3.0.20-3.module_el8.3.0+2067+67902674	freeradius-krb5-3.0.20-3.module_el8.3.0+2067+67902674.x86_64.rpm
almalinux	8	x86_64	freeradius-ldap	< 3.0.20-3.module_el8.3.0+2067+67902674	freeradius-ldap-3.0.20-3.module_el8.3.0+2067+67902674.x86_64.rpm
almalinux	8	x86_64	freeradius-mysql	< 3.0.20-3.module_el8.3.0+2067+67902674	freeradius-mysql-3.0.20-3.module_el8.3.0+2067+67902674.x86_64.rpm
almalinux	8	x86_64	freeradius-perl	< 3.0.20-3.module_el8.3.0+2067+67902674	freeradius-perl-3.0.20-3.module_el8.3.0+2067+67902674.x86_64.rpm
almalinux	8	x86_64	freeradius-postgresql	< 3.0.20-3.module_el8.3.0+2067+67902674	freeradius-postgresql-3.0.20-3.module_el8.3.0+2067+67902674.x86_64.rpm
almalinux	8	x86_64	freeradius-rest	< 3.0.20-3.module_el8.3.0+2067+67902674	freeradius-rest-3.0.20-3.module_el8.3.0+2067+67902674.x86_64.rpm
almalinux	8	x86_64	freeradius-sqlite	< 3.0.20-3.module_el8.3.0+2067+67902674	freeradius-sqlite-3.0.20-3.module_el8.3.0+2067+67902674.x86_64.rpm