RHBA-2015:0438 - Bug Fix Advisory

Topic

Updated freeradius packages that fix several bugs and add various enhancements
are now available for Red Hat Enterprise Linux 7.

Description

FreeRADIUS is a high-performance and highly configurable free Remote
Authentication Dial In User Service (RADIUS) server, designed to allow
centralized authentication and authorization for a network.

The freeradius packages have been upgraded to upstream version 3.0.4, which
provides a number of bug fixes and enhancements over the previous version.
(BZ#1120234)

In addition, the radconf2xml utility has been removed as unused and no longer
maintained. Also, the rbmonkey test tool has been removed as it was only needed
during the development of the freeradius packages.

This update also fixes the following bug:

• The FreeRADIUS Simple Network Management Protocol (SNMP) Management

Information Base (MIB) files were missing from the freeradius packages. With
this update, the files are installed as a part of freeradius. (BZ#1109159)

All users of freeradius are advised to upgrade to these updated packages, which
fix these bugs and add these enhancements.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.5 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.3 x86_64
• Red Hat Enterprise Linux for IBM z Systems 7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.6 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.4 s390x
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.6 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.5 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.3 ppc64
• Red Hat Enterprise Linux Server from RHUI 7 x86_64
• Red Hat Enterprise Linux Server - AUS 7.7 x86_64
• Red Hat Enterprise Linux Server - AUS 7.6 x86_64
• Red Hat Enterprise Linux Server - AUS 7.4 x86_64
• Red Hat Enterprise Linux Server - AUS 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.5 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.3 s390x
• Red Hat Enterprise Linux for Power, big endian 7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.4 ppc64
• Red Hat Enterprise Linux Server - TUS 7.7 x86_64
• Red Hat Enterprise Linux Server - TUS 7.6 x86_64
• Red Hat Enterprise Linux Server - TUS 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64

Fixes

• BZ - 1036562 - Missing doc page for kerberos module
• BZ - 1099625 - Default message digest defaults to sha1
• BZ - 1109159 - missing mib files in freeradius package
• BZ - 1109164 - snmp trap messages send by radiusd are inconsistent and incomplete
• BZ - 1110186 - radiusd doesn't send snmp trap when ldap connection fails/opens/closes
• BZ - 1110407 - radiusd doesn't send snmp trap after "radmin -e 'hup files'"
• BZ - 1110414 - radiusd doesn't send snmp trap when sql connection is opened,closed or fail
• BZ - 1113010 - radiusd doesn't send snmp trap when max_threads value is reached
• BZ - 1113509 - radiusd aborts when it has no proxy response with active snmp traps
• BZ - 1114669 - Missing -P option in radtest manpage
• BZ - 1115128 - radisud can't start if proto = udp is specified
• BZ - 1115134 - radiusd aborts after 'Access-Request' when listens on TCP port
• BZ - 1115137 - radiusd listens on udp port even if proto = tcp is specified
• BZ - 1120234 - Rebase freeradius to 3.0.3 or later minor bug fix release
• BZ - 1126725 - radiusd silently fails when start_servers is higher than max_servers
• BZ - 1135446 - Radeapclient is not available
• BZ - 1146403 - radiusd segfaults when file for perl module has wrong permissions
• BZ - 1146406 - /etc/raddb/mods-config/perl/example.pl has wrong permissions and radiusd fails to start
• BZ - 1146441 - upstream test suite fails
• BZ - 1146898 - 'eap-md5' value is missing in -t option in SYNOPSIS of radtest man page
• BZ - 1146939 - dhcpclient lookups dictionary.dhcp file in wrong location
• BZ - 1146966 - missing man page or purpose for some commands from freeradius-utils
• BZ - 1147464 - man page of clients.conf is outdated
• BZ - 1155070 - FreeRADIUS doesn't start after upgrade due to failing OpenSSL version check
• BZ - 1155961 - Finalize pool triggers
• BZ - 1162156 - FreeRADIUS installs rlm_rest unintentionally
• BZ - 1168247 - add man page or description to config file for ipaddr,ipv4addr and ipv6addr options
• BZ - 1168868 - radiusd can't use ipv6 address from DNS in ipaddr option
• BZ - 1173526 - backslash from entry in ldap disappears

CVEs

(none)

References

(none)