Synopsis

freeradius bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Topic

Updated freeradius packages that fix several bugs and add various enhancements
are now available for Red Hat Enterprise Linux 6.

Description

FreeRADIUS is an open-source Remote Authentication Dial In User Service (RADIUS)
server which allows RADIUS clients to perform authentication against the RADIUS
server. The RADIUS server may optionally perform accounting of its operations
using the RADIUS protocol.

The freeradius packages have been upgraded to upstream version 2.1.12, which
provides a number of bug fixes and enhancements over the previous version.
(BZ#736878)

This update fixes the following bugs:

• The radtest command-line argument to request the PPP hint option was not
  parsed correctly. Consequently, radclient did not add the PPP hint to the
  request packet and the test failed. This update corrects the problem and radtest
  now functions as expected. (BZ#787116)
  
• After log rotation, the freeradius logrotate script failed to reload the
  radiusd daemon after a log rotation and log messages were lost. This update has
  added a command to the freeradius logrotate script to reload the radiusd daemon
  and the radiusd daemon reinitializes and reopens its log files after log
  rotation as expected. (BZ#705723)
  
• The radtest argument with the eap-md5 option failed because it passed the IP
  family argument when invoking the radeapclient utility and the radeapclient
  utility did not recognize the IP family. The radeapclient now recognizes the IP
  family argument and radtest now works with eap-md5 as expected. (BZ#712803)
  
• Previously, freeradius was compiled without the "--with-udpfromto" option.
  Consequently, with a multihomed server and explicitly specifying the IP address,
  freeradius sent the reply from the wrong IP address. With this update,
  freeradius has been built with the --with-udpfromto configuration option and the
  RADIUS reply is always sourced from the IP the request was sent to. (BZ#700870)
  
• The password expiration field for local passwords was not checked by the unix
  module and the debug information was erroneous. Consequently, a user with an
  expired password in the local password file was authenticated despite having an
  expired password. With this update, check of the password expiration has been
  modified. A user with an expired local password is denied access and correct
  debugging information is written to the log file. (BZ#753764)
  
• Due to invalid syntax in the PostgreSQL admin schema file, the FreeRADIUS
  PostgreSQL tables failed to be created. With this update, the syntax has been
  adjusted and the tables are created as expected. (BZ#690756)
  
• When FreeRADIUS received a request, it sometimes failed with the following
  message:
  

WARNING: Internal sanity check failed in event handler for request 6

This bug was fixed by upgrading to upstream version 2.1.12. (BZ#782905)

• FreeRADIUS has a thread pool that will dynamically grow based on load. If
  multiple threads using the rlm_perl() function are spawned in quick succession,
  freeradius sometimes terminated unexpectedly with a segmentation fault due to
  parallel calls to the rlm_perl_clone() function. With this update, mutex for the
  threads has been added and the problem no longer occurs. (BZ#810605)
  

All users of freeradius are advised to upgrade to these updated packages, which
fix these bugs and add these enhancements.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/knowledge/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386

Fixes

• BZ - 690756 - possible errors in /etc/raddb/sql/postgresql/admin.sql template
• BZ - 700870 - freeradius not compiled with --with-udpfromto
• BZ - 705723 - freeradius logrotate script does not reload running daemon, causing log files not written after logrotate
• BZ - 712803 - radtest script is not working with eap-md5 option
• BZ - 753764 - shadow password expiration does not work in freeradius 2.1.10
• BZ - 782905 - Requests fails with "Internal sanity check failed" message
• BZ - 787116 - radtest PPPhint option is not parsed properly
• BZ - 810605 - Segfault with freeradius-perl threading

CVEs

• CVE-2011-4966

References

(none)

Red Hat Enterprise Linux Server 6

SRPM
freeradius-2.1.12-3.el6.src.rpm	SHA-256: 8c2f99000d6ec40c497583d91e6c376f29c09c4f684e6adf0db0e97ba932303f
x86_64
freeradius-2.1.12-3.el6.x86_64.rpm	SHA-256: c7dddcd4c20c91f7ba387d698f61573c5002c12e3a22c70cef3b7cbc4872b51a
freeradius-debuginfo-2.1.12-3.el6.x86_64.rpm	SHA-256: bd3d49b16f90e04859bd9690cc863ede6b3adce575db4051b296703f727120b9
freeradius-debuginfo-2.1.12-3.el6.x86_64.rpm	SHA-256: bd3d49b16f90e04859bd9690cc863ede6b3adce575db4051b296703f727120b9
freeradius-krb5-2.1.12-3.el6.x86_64.rpm	SHA-256: 2c79945f1645594545a28a637abefa189ef25018dae5eb6d0a55d7c8436c0300
freeradius-ldap-2.1.12-3.el6.x86_64.rpm	SHA-256: afcb376d60397d7dfb9b782560989d01ef2b5bd1dd2d889a186f6be619d66495
freeradius-mysql-2.1.12-3.el6.x86_64.rpm	SHA-256: d77f11614ff1b05feb27cee5110c85d3da7c913efea082df42757e917f8c54f5
freeradius-perl-2.1.12-3.el6.x86_64.rpm	SHA-256: bfeace7250194ef7ff28a0c063b2939ff84ead55c6f63f8c83ad77821bdfca11
freeradius-postgresql-2.1.12-3.el6.x86_64.rpm	SHA-256: 60e3b929e88448f516f1d05e4115aff0575a54d25a5c151d475e94420c9824f1
freeradius-python-2.1.12-3.el6.x86_64.rpm	SHA-256: b1988f0c4cf9f427c25bb13cd2839915ebed100d2e531602468bd0ec232541f5
freeradius-unixODBC-2.1.12-3.el6.x86_64.rpm	SHA-256: e38f720b1ec33c217bc1a5b76884c5e53d2b5f86d0dc7c1ff2511e6b0cfd13e8
freeradius-utils-2.1.12-3.el6.x86_64.rpm	SHA-256: ce680aee46869e6cf33b5dafd427ac9a0bbdc1ddca860315d8291c4591f75f9e
i386
freeradius-2.1.12-3.el6.i686.rpm	SHA-256: 67c4e983b2d644686616be072dc7969270dfc7b8a3185d06d7a3cd7991cd2d78
freeradius-debuginfo-2.1.12-3.el6.i686.rpm	SHA-256: a1a6cf7f391d461d275a25720f6121e94e34c1a72875239a036f841b12ad8dbe
freeradius-debuginfo-2.1.12-3.el6.i686.rpm	SHA-256: a1a6cf7f391d461d275a25720f6121e94e34c1a72875239a036f841b12ad8dbe
freeradius-krb5-2.1.12-3.el6.i686.rpm	SHA-256: f9aac7f8a3870cd298915a77aa0afd29003aa29d5ac50771fb423970c7e84883
freeradius-ldap-2.1.12-3.el6.i686.rpm	SHA-256: 9e26714d8a3c2edd11850a71d1c29e0d63dbabac61e84e6a7cc7bfd022290ddc
freeradius-mysql-2.1.12-3.el6.i686.rpm	SHA-256: 8d7c72a8377564b37a8da9b0d550ac6a0399a0665de6527fd928be9388f2b594
freeradius-perl-2.1.12-3.el6.i686.rpm	SHA-256: 2dd955d382134997d6b12f6dee21dd8d4a157825206771b01a2b9dcfd0e11ca6
freeradius-postgresql-2.1.12-3.el6.i686.rpm	SHA-256: 2b914be8d2a000a07902b70dfd77e88e8eeafdb011c6a393e64ad672907c6e1b
freeradius-python-2.1.12-3.el6.i686.rpm	SHA-256: d5b9c1cdc39f59c2010dd47cc8c2ecd00c48e4150c6fc08892bc2c55081b6a73
freeradius-unixODBC-2.1.12-3.el6.i686.rpm	SHA-256: 4b4141b04550f895feac6ff8042b9a1bbce296555374873e65d47239d25187f5
freeradius-utils-2.1.12-3.el6.i686.rpm	SHA-256: 5dfab3b84fc7da50d1ad28294fe0532b76a02191f346fc8b24dbecd569cbc53e

Red Hat Enterprise Linux Workstation 6

SRPM
freeradius-2.1.12-3.el6.src.rpm	SHA-256: 8c2f99000d6ec40c497583d91e6c376f29c09c4f684e6adf0db0e97ba932303f
x86_64
freeradius-2.1.12-3.el6.x86_64.rpm	SHA-256: c7dddcd4c20c91f7ba387d698f61573c5002c12e3a22c70cef3b7cbc4872b51a
freeradius-debuginfo-2.1.12-3.el6.x86_64.rpm	SHA-256: bd3d49b16f90e04859bd9690cc863ede6b3adce575db4051b296703f727120b9
freeradius-debuginfo-2.1.12-3.el6.x86_64.rpm	SHA-256: bd3d49b16f90e04859bd9690cc863ede6b3adce575db4051b296703f727120b9
freeradius-krb5-2.1.12-3.el6.x86_64.rpm	SHA-256: 2c79945f1645594545a28a637abefa189ef25018dae5eb6d0a55d7c8436c0300
freeradius-ldap-2.1.12-3.el6.x86_64.rpm	SHA-256: afcb376d60397d7dfb9b782560989d01ef2b5bd1dd2d889a186f6be619d66495
freeradius-mysql-2.1.12-3.el6.x86_64.rpm	SHA-256: d77f11614ff1b05feb27cee5110c85d3da7c913efea082df42757e917f8c54f5
freeradius-perl-2.1.12-3.el6.x86_64.rpm	SHA-256: bfeace7250194ef7ff28a0c063b2939ff84ead55c6f63f8c83ad77821bdfca11
freeradius-postgresql-2.1.12-3.el6.x86_64.rpm	SHA-256: 60e3b929e88448f516f1d05e4115aff0575a54d25a5c151d475e94420c9824f1
freeradius-python-2.1.12-3.el6.x86_64.rpm	SHA-256: b1988f0c4cf9f427c25bb13cd2839915ebed100d2e531602468bd0ec232541f5
freeradius-unixODBC-2.1.12-3.el6.x86_64.rpm	SHA-256: e38f720b1ec33c217bc1a5b76884c5e53d2b5f86d0dc7c1ff2511e6b0cfd13e8
freeradius-utils-2.1.12-3.el6.x86_64.rpm	SHA-256: ce680aee46869e6cf33b5dafd427ac9a0bbdc1ddca860315d8291c4591f75f9e
i386
freeradius-2.1.12-3.el6.i686.rpm	SHA-256: 67c4e983b2d644686616be072dc7969270dfc7b8a3185d06d7a3cd7991cd2d78
freeradius-debuginfo-2.1.12-3.el6.i686.rpm	SHA-256: a1a6cf7f391d461d275a25720f6121e94e34c1a72875239a036f841b12ad8dbe
freeradius-debuginfo-2.1.12-3.el6.i686.rpm	SHA-256: a1a6cf7f391d461d275a25720f6121e94e34c1a72875239a036f841b12ad8dbe
freeradius-krb5-2.1.12-3.el6.i686.rpm	SHA-256: f9aac7f8a3870cd298915a77aa0afd29003aa29d5ac50771fb423970c7e84883
freeradius-ldap-2.1.12-3.el6.i686.rpm	SHA-256: 9e26714d8a3c2edd11850a71d1c29e0d63dbabac61e84e6a7cc7bfd022290ddc
freeradius-mysql-2.1.12-3.el6.i686.rpm	SHA-256: 8d7c72a8377564b37a8da9b0d550ac6a0399a0665de6527fd928be9388f2b594
freeradius-perl-2.1.12-3.el6.i686.rpm	SHA-256: 2dd955d382134997d6b12f6dee21dd8d4a157825206771b01a2b9dcfd0e11ca6
freeradius-postgresql-2.1.12-3.el6.i686.rpm	SHA-256: 2b914be8d2a000a07902b70dfd77e88e8eeafdb011c6a393e64ad672907c6e1b
freeradius-python-2.1.12-3.el6.i686.rpm	SHA-256: d5b9c1cdc39f59c2010dd47cc8c2ecd00c48e4150c6fc08892bc2c55081b6a73
freeradius-unixODBC-2.1.12-3.el6.i686.rpm	SHA-256: 4b4141b04550f895feac6ff8042b9a1bbce296555374873e65d47239d25187f5
freeradius-utils-2.1.12-3.el6.i686.rpm	SHA-256: 5dfab3b84fc7da50d1ad28294fe0532b76a02191f346fc8b24dbecd569cbc53e

Red Hat Enterprise Linux for IBM z Systems 6

SRPM
freeradius-2.1.12-3.el6.src.rpm	SHA-256: 8c2f99000d6ec40c497583d91e6c376f29c09c4f684e6adf0db0e97ba932303f
s390x
freeradius-2.1.12-3.el6.s390x.rpm	SHA-256: 99eda9a09e5a309924abe5b8f4ade08884f9a6bd523426675114d57d44924c70
freeradius-debuginfo-2.1.12-3.el6.s390x.rpm	SHA-256: f8a5455a6d03fd6c1c8d0be721e11178408dec3cc9b31a104cd4e08be877b7a1
freeradius-debuginfo-2.1.12-3.el6.s390x.rpm	SHA-256: f8a5455a6d03fd6c1c8d0be721e11178408dec3cc9b31a104cd4e08be877b7a1
freeradius-krb5-2.1.12-3.el6.s390x.rpm	SHA-256: 776c8f760beae73f176bb568f3f7e0c7d47524825cc8ed23e6be4d8a022b1c48
freeradius-ldap-2.1.12-3.el6.s390x.rpm	SHA-256: fb73ff303ec3024d816f6856ff227c64f52ffc1d2538152b65f7a13b9c8a8b2f
freeradius-mysql-2.1.12-3.el6.s390x.rpm	SHA-256: 0769c87c76aacf32bb44474451ca051411d033c780389f2fbb9b3dcaf589b17b
freeradius-perl-2.1.12-3.el6.s390x.rpm	SHA-256: be3446de779091d50ffae069afdfddbdcd2b2db67620782170af6c8cf65482aa
freeradius-postgresql-2.1.12-3.el6.s390x.rpm	SHA-256: d8d71c947373385ec258d6eef3b5506a084194afd7acd1349a3e4a13600cf5d8
freeradius-python-2.1.12-3.el6.s390x.rpm	SHA-256: 10a1f104cbd8d2b0a164cb1f9ce7ccd8905afa307f1b27650ea44131718c0f32
freeradius-unixODBC-2.1.12-3.el6.s390x.rpm	SHA-256: 26ac129a780abea0b343a8258eacecb5f9046ba5ba5f9924b48a761071268da4
freeradius-utils-2.1.12-3.el6.s390x.rpm	SHA-256: 245655f0d4f1e798049972b262463d9e0046bd31d84b0adb611df66ba0f66670

Red Hat Enterprise Linux for Power, big endian 6

SRPM
freeradius-2.1.12-3.el6.src.rpm	SHA-256: 8c2f99000d6ec40c497583d91e6c376f29c09c4f684e6adf0db0e97ba932303f
ppc64
freeradius-2.1.12-3.el6.ppc64.rpm	SHA-256: 19b0725854549198eb6ea33f766c1856c16634d4f8f844261e3d22006cb2b80d
freeradius-debuginfo-2.1.12-3.el6.ppc64.rpm	SHA-256: 6997931a68d582d893c3a05c895e6f97b06741292cfa2f9ab3aff0c95cf8c3c9
freeradius-debuginfo-2.1.12-3.el6.ppc64.rpm	SHA-256: 6997931a68d582d893c3a05c895e6f97b06741292cfa2f9ab3aff0c95cf8c3c9
freeradius-krb5-2.1.12-3.el6.ppc64.rpm	SHA-256: 3cfb3f39b5fdf4e65e5b2ecacefa4b23ce342292a51ebe0d196e028c6051b5ab
freeradius-ldap-2.1.12-3.el6.ppc64.rpm	SHA-256: ee1467c27c611d331aced730f55ca57fef7ef2f76564a152a678d98a2b46dc57
freeradius-mysql-2.1.12-3.el6.ppc64.rpm	SHA-256: 9f81ea88bccbf06c701f5b61ad8d8dae8c4750970a516deb621cb24cabdedfa0
freeradius-perl-2.1.12-3.el6.ppc64.rpm	SHA-256: 35cfb8c3faeff8549e085a96965a7b82b74a3894b731f101bc15b94b382d9cf9
freeradius-postgresql-2.1.12-3.el6.ppc64.rpm	SHA-256: 29951553cd726649e029e8828b298850f03daad2a2824bd80a1d4fc4fc7f5f92
freeradius-python-2.1.12-3.el6.ppc64.rpm	SHA-256: 4fb1edca42bf7e1e962f3be4848d2e11ceec403d5340408237a8c04b7ac42407
freeradius-unixODBC-2.1.12-3.el6.ppc64.rpm	SHA-256: b4f64a8002e2a3b04baac0eeb3aec5c130d1574201076be1e0d536d09bef4629
freeradius-utils-2.1.12-3.el6.ppc64.rpm	SHA-256: 790134b11c26e0661166583b93fb282d52d20fe2ef45113575dabd2616458e11

Red Hat Enterprise Linux Server from RHUI 6

SRPM
freeradius-2.1.12-3.el6.src.rpm	SHA-256: 8c2f99000d6ec40c497583d91e6c376f29c09c4f684e6adf0db0e97ba932303f
x86_64
freeradius-2.1.12-3.el6.x86_64.rpm	SHA-256: c7dddcd4c20c91f7ba387d698f61573c5002c12e3a22c70cef3b7cbc4872b51a
freeradius-debuginfo-2.1.12-3.el6.x86_64.rpm	SHA-256: bd3d49b16f90e04859bd9690cc863ede6b3adce575db4051b296703f727120b9
freeradius-debuginfo-2.1.12-3.el6.x86_64.rpm	SHA-256: bd3d49b16f90e04859bd9690cc863ede6b3adce575db4051b296703f727120b9
freeradius-krb5-2.1.12-3.el6.x86_64.rpm	SHA-256: 2c79945f1645594545a28a637abefa189ef25018dae5eb6d0a55d7c8436c0300
freeradius-ldap-2.1.12-3.el6.x86_64.rpm	SHA-256: afcb376d60397d7dfb9b782560989d01ef2b5bd1dd2d889a186f6be619d66495
freeradius-mysql-2.1.12-3.el6.x86_64.rpm	SHA-256: d77f11614ff1b05feb27cee5110c85d3da7c913efea082df42757e917f8c54f5
freeradius-perl-2.1.12-3.el6.x86_64.rpm	SHA-256: bfeace7250194ef7ff28a0c063b2939ff84ead55c6f63f8c83ad77821bdfca11
freeradius-postgresql-2.1.12-3.el6.x86_64.rpm	SHA-256: 60e3b929e88448f516f1d05e4115aff0575a54d25a5c151d475e94420c9824f1
freeradius-python-2.1.12-3.el6.x86_64.rpm	SHA-256: b1988f0c4cf9f427c25bb13cd2839915ebed100d2e531602468bd0ec232541f5
freeradius-unixODBC-2.1.12-3.el6.x86_64.rpm	SHA-256: e38f720b1ec33c217bc1a5b76884c5e53d2b5f86d0dc7c1ff2511e6b0cfd13e8
freeradius-utils-2.1.12-3.el6.x86_64.rpm	SHA-256: ce680aee46869e6cf33b5dafd427ac9a0bbdc1ddca860315d8291c4591f75f9e
i386
freeradius-2.1.12-3.el6.i686.rpm	SHA-256: 67c4e983b2d644686616be072dc7969270dfc7b8a3185d06d7a3cd7991cd2d78
freeradius-debuginfo-2.1.12-3.el6.i686.rpm	SHA-256: a1a6cf7f391d461d275a25720f6121e94e34c1a72875239a036f841b12ad8dbe
freeradius-debuginfo-2.1.12-3.el6.i686.rpm	SHA-256: a1a6cf7f391d461d275a25720f6121e94e34c1a72875239a036f841b12ad8dbe
freeradius-krb5-2.1.12-3.el6.i686.rpm	SHA-256: f9aac7f8a3870cd298915a77aa0afd29003aa29d5ac50771fb423970c7e84883
freeradius-ldap-2.1.12-3.el6.i686.rpm	SHA-256: 9e26714d8a3c2edd11850a71d1c29e0d63dbabac61e84e6a7cc7bfd022290ddc
freeradius-mysql-2.1.12-3.el6.i686.rpm	SHA-256: 8d7c72a8377564b37a8da9b0d550ac6a0399a0665de6527fd928be9388f2b594
freeradius-perl-2.1.12-3.el6.i686.rpm	SHA-256: 2dd955d382134997d6b12f6dee21dd8d4a157825206771b01a2b9dcfd0e11ca6
freeradius-postgresql-2.1.12-3.el6.i686.rpm	SHA-256: 2b914be8d2a000a07902b70dfd77e88e8eeafdb011c6a393e64ad672907c6e1b
freeradius-python-2.1.12-3.el6.i686.rpm	SHA-256: d5b9c1cdc39f59c2010dd47cc8c2ecd00c48e4150c6fc08892bc2c55081b6a73
freeradius-unixODBC-2.1.12-3.el6.i686.rpm	SHA-256: 4b4141b04550f895feac6ff8042b9a1bbce296555374873e65d47239d25187f5
freeradius-utils-2.1.12-3.el6.i686.rpm	SHA-256: 5dfab3b84fc7da50d1ad28294fe0532b76a02191f346fc8b24dbecd569cbc53e