- Issued:
- 2019-05-13
- Updated:
- 2019-05-13
RHSA-2019:1142 - Security Advisory
Synopsis
Important: freeradius:3.0 security update
Type/Severity
Security Advisory: Important
Topic
An update for the freeradius:3.0 module is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Description
FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network.
Security Fix(es):
- freeradius: eap-pwd: authentication bypass via an invalid curve attack (CVE-2019-11235)
- freeradius: eap-pwd: fake authentication using reflection (CVE-2019-11234)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Solution
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
Affected Products
- Red Hat Enterprise Linux for x86_64 8 x86_64
- Red Hat Enterprise Linux for IBM z Systems 8 s390x
- Red Hat Enterprise Linux for Power, little endian 8 ppc64le
- Red Hat Enterprise Linux for ARM 64 8 aarch64
Fixes
- BZ - 1695748 - CVE-2019-11235 freeradius: eap-pwd: authentication bypass via an invalid curve attack
- BZ - 1695783 - CVE-2019-11234 freeradius: eap-pwd: fake authentication using reflection
CVEs
References
Note:
More recent versions of these packages may be available.
Click a package name for more details.
Red Hat Enterprise Linux for x86_64 8
| SRPM | |
|---|---|
| freeradius-3.0.17-4.module+el8.0.0+3108+851cb559.src.rpm | SHA-256: cb3bb50d638fbad4359e0705759aae04be1efae68ec1404f5d86c4353d7681c7 |
| x86_64 | |
| freeradius-3.0.17-4.module+el8.0.0+3108+851cb559.x86_64.rpm | SHA-256: 24f7786e81292bb1c493119fcb6d59090311a84cc30b2fdaac78030100998f3c |
| freeradius-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.x86_64.rpm | SHA-256: 443e25049fe038f71d3fd5811d5414f6aec756112e32d0e251b1147ce4807152 |
| freeradius-debugsource-3.0.17-4.module+el8.0.0+3108+851cb559.x86_64.rpm | SHA-256: 5f07478472cc32f0828b0b71346fdbffc5a02dd3da1ef1c20d6a1676b461821f |
| freeradius-devel-3.0.17-4.module+el8.0.0+3108+851cb559.x86_64.rpm | SHA-256: 6fe0d9cd153d9e5df21e96e3b990933e486e0425ff165192f44b76a74d3e4dcd |
| freeradius-doc-3.0.17-4.module+el8.0.0+3108+851cb559.x86_64.rpm | SHA-256: 81250dcf1109f204dd15707b583be75b73600638bb296659101728cff1783d7b |
| freeradius-krb5-3.0.17-4.module+el8.0.0+3108+851cb559.x86_64.rpm | SHA-256: 71295fef5fc4d8a8ec201546046c8ca54e09109f695b03f7dde62a390d7c495c |
| freeradius-krb5-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.x86_64.rpm | SHA-256: 095d73c8d7b2b85eb3d42a9cc4b472590995641d50db0883eb1697bf160dcf16 |
| freeradius-ldap-3.0.17-4.module+el8.0.0+3108+851cb559.x86_64.rpm | SHA-256: cea351d56a228af5feb60dfcb3aa573bef8b2d460ac72869457f41e36b044ed3 |
| freeradius-ldap-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.x86_64.rpm | SHA-256: 4375ec4c66de02bee8d1815659945142b09f269e7758d1694502e485995c22f7 |
| freeradius-mysql-3.0.17-4.module+el8.0.0+3108+851cb559.x86_64.rpm | SHA-256: 1ffe194220721bf2f94b460bdb2f9f184ce709182aec8a2f6f3c21a6edd6a2e5 |
| freeradius-mysql-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.x86_64.rpm | SHA-256: fa8db98f9da5792ce4fb610df9efb1987d17c27d7eccec7891e8b60410eb84aa |
| freeradius-perl-3.0.17-4.module+el8.0.0+3108+851cb559.x86_64.rpm | SHA-256: cc4db0e10e9ff788f1968096fa326c74831904f19bec66baa6bfc86f357643e8 |
| freeradius-perl-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.x86_64.rpm | SHA-256: d8f9585d0dfb6ddfa93900c2046f4ca2053e114dd7c646385ef2722de103947c |
| freeradius-postgresql-3.0.17-4.module+el8.0.0+3108+851cb559.x86_64.rpm | SHA-256: 176bb222fc5b067f2835648a3c1e65d95820cf6d998480289f27053752be1976 |
| freeradius-postgresql-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.x86_64.rpm | SHA-256: d85281f5a97c6ca863983a40f448f36d61679a60c50be5c9a77d90302781232f |
| freeradius-rest-3.0.17-4.module+el8.0.0+3108+851cb559.x86_64.rpm | SHA-256: b03e37b3c74ef564246139767f905a42e04d73969e426da73f70cc4b8787b2c1 |
| freeradius-rest-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.x86_64.rpm | SHA-256: 87b6f3628dedb102147a660f47817e7ed4808fba8922cf77a3b2ea7bee04cb7a |
| freeradius-sqlite-3.0.17-4.module+el8.0.0+3108+851cb559.x86_64.rpm | SHA-256: 1865289e96098218d62bf613a223f52d4eb14f50eb59d03ef4ce572a57c12875 |
| freeradius-sqlite-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.x86_64.rpm | SHA-256: a205bee590506423e46f06b0e8bbc29480079faf7adbacb649ce0e67f1bb980d |
| freeradius-unixODBC-3.0.17-4.module+el8.0.0+3108+851cb559.x86_64.rpm | SHA-256: e230e6b0ffc6c7c6e602b091616f12f5d359e6b171c3510b11d5636de5a43609 |
| freeradius-unixODBC-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.x86_64.rpm | SHA-256: 70c111962dc161d4131a4597639b609477625d0ab654bdd209f1789a7a47d24d |
| freeradius-utils-3.0.17-4.module+el8.0.0+3108+851cb559.x86_64.rpm | SHA-256: 932940ca892417e2491c8b9a052c425ae0927e1be48b6f441f6dfda85b44021b |
| freeradius-utils-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.x86_64.rpm | SHA-256: 3ef4b1efc1e97ff4a9163869db9c41ea4bac26632bf757401af1cce22b97a0bc |
Red Hat Enterprise Linux for IBM z Systems 8
| SRPM | |
|---|---|
| freeradius-3.0.17-4.module+el8.0.0+3108+851cb559.src.rpm | SHA-256: cb3bb50d638fbad4359e0705759aae04be1efae68ec1404f5d86c4353d7681c7 |
| s390x | |
| freeradius-3.0.17-4.module+el8.0.0+3108+851cb559.s390x.rpm | SHA-256: c3e28f1cde4b3da4770a758f0f1ac6e23fa8b7a5409d039a2091bb59897eacfb |
| freeradius-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.s390x.rpm | SHA-256: 4087dc1447f1ae6d336ef2a3359e646bd2b777eaadab2462d3b13cc0288f1dc4 |
| freeradius-debugsource-3.0.17-4.module+el8.0.0+3108+851cb559.s390x.rpm | SHA-256: 8ef488ac6c6bbdb8b653ef621d443db299392f2af56b3de841b14ed5a3b60dab |
| freeradius-devel-3.0.17-4.module+el8.0.0+3108+851cb559.s390x.rpm | SHA-256: 3e5d080390fb6dfd00730a3f9252c9267e1b8b04b2e500967b0ad69a00e4f9de |
| freeradius-doc-3.0.17-4.module+el8.0.0+3108+851cb559.s390x.rpm | SHA-256: ca1d4006268ef05d45ad92e7f35556404103c40753f076366c37ece61dc58f67 |
| freeradius-krb5-3.0.17-4.module+el8.0.0+3108+851cb559.s390x.rpm | SHA-256: 9cbcde9b55df188633bda6fe69611f95d97b56f9288cd41764d9b701f087bc80 |
| freeradius-krb5-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.s390x.rpm | SHA-256: 8c3166e2e99fe7fd0fcf98dfb3379c150bd13ec6d04bf2750dc3ab05043f316b |
| freeradius-ldap-3.0.17-4.module+el8.0.0+3108+851cb559.s390x.rpm | SHA-256: fc0f07de83ffb6b7a5df09cdb88f9cb9d135149568414d135bfe73ed16bfefbb |
| freeradius-ldap-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.s390x.rpm | SHA-256: 4c583667e81aa7390d083ea5e726114958c6805c8a50aa58bcb9d17513d00ea9 |
| freeradius-mysql-3.0.17-4.module+el8.0.0+3108+851cb559.s390x.rpm | SHA-256: bb23541f11dbc4c6ea963b8add66d3867ea020c0ce6430e6426e11ff8c0c4e7a |
| freeradius-mysql-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.s390x.rpm | SHA-256: 019e1f7d19b83f467665ec567ecc820d66001880ac102a7506ed94b9d6bf2306 |
| freeradius-perl-3.0.17-4.module+el8.0.0+3108+851cb559.s390x.rpm | SHA-256: 40e156989fcb0bfeb276c92659ec85dbece9dafbdaec2d870990cd39e8f5245f |
| freeradius-perl-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.s390x.rpm | SHA-256: b9861955eddf3ea17fb39de5afa8f36a203d2f14817ff9522b2c0eabcf0d4bbc |
| freeradius-postgresql-3.0.17-4.module+el8.0.0+3108+851cb559.s390x.rpm | SHA-256: b6cea455def3eaaa6592427c5017e0345ee095bcb57a7cb9bb74f1ee75cd7b67 |
| freeradius-postgresql-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.s390x.rpm | SHA-256: eb3f6e6a17e235833b708e752a9792df22fa990e522331eb587aa656e143cd0c |
| freeradius-rest-3.0.17-4.module+el8.0.0+3108+851cb559.s390x.rpm | SHA-256: aabf213ad0c28cf6bac8f05c0299b05637e4d3fd4426381ee2ba182d5af80e2b |
| freeradius-rest-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.s390x.rpm | SHA-256: 9e85e88b0064e0bf77c39953b4a486cb330fd2d3a292b8f5d4ca82baef2ffd32 |
| freeradius-sqlite-3.0.17-4.module+el8.0.0+3108+851cb559.s390x.rpm | SHA-256: ddc8c62bd95f6aa760d2128309ae52c9bb3f7e69ae92bef6c7b962b291d1bc5a |
| freeradius-sqlite-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.s390x.rpm | SHA-256: c62539fa80a5cc1eb8b26b7c116440c3772d4c2255575bcc77b2cae4dd534d61 |
| freeradius-unixODBC-3.0.17-4.module+el8.0.0+3108+851cb559.s390x.rpm | SHA-256: 04020e3be8a32b4ec4b7c5df862c3563aa57107e62c54047bd4df72f4c8622f4 |
| freeradius-unixODBC-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.s390x.rpm | SHA-256: 10a4ec9cd9cbaed8d8fe5d893d22746e0abacefef032b04fdbea64ad55b011c3 |
| freeradius-utils-3.0.17-4.module+el8.0.0+3108+851cb559.s390x.rpm | SHA-256: f7faee135abdaeb7a3db6b8ac98badd59ebf68005ebb57e6c3b5ccd722b78168 |
| freeradius-utils-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.s390x.rpm | SHA-256: 73789303fd7efd6f3f1812fc2aa5ba8df9a4dd10d0e6f6a071dd9121e371ee38 |
Red Hat Enterprise Linux for Power, little endian 8
| SRPM | |
|---|---|
| freeradius-3.0.17-4.module+el8.0.0+3108+851cb559.src.rpm | SHA-256: cb3bb50d638fbad4359e0705759aae04be1efae68ec1404f5d86c4353d7681c7 |
| ppc64le | |
| freeradius-3.0.17-4.module+el8.0.0+3108+851cb559.ppc64le.rpm | SHA-256: a447aa688991abe40383d0d655d602aa8f2988c5c3a83a22f66cd11e602634a6 |
| freeradius-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.ppc64le.rpm | SHA-256: a4db05beb9497acb1b2b9a0978947a5e6c6fd946de6f25840ad50fd89166ced6 |
| freeradius-debugsource-3.0.17-4.module+el8.0.0+3108+851cb559.ppc64le.rpm | SHA-256: 986332801bd1e9c2980bd4fe771c8004f440d6cd5d97bcb52d4db208205da848 |
| freeradius-devel-3.0.17-4.module+el8.0.0+3108+851cb559.ppc64le.rpm | SHA-256: b1045a6a5931ee44040475387d47907cc0da70119d94ee27b2cf84771336f185 |
| freeradius-doc-3.0.17-4.module+el8.0.0+3108+851cb559.ppc64le.rpm | SHA-256: 4545c226c87f88336f3e29be167428ab5c5a1407d76da3c71e6d7781084eaf1e |
| freeradius-krb5-3.0.17-4.module+el8.0.0+3108+851cb559.ppc64le.rpm | SHA-256: e77e44de0888cef7bdeee55aaf9f275636bb8c949d2e024f5d407d91cc00ccba |
| freeradius-krb5-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.ppc64le.rpm | SHA-256: ca19d2ee9eac7b785ec430f9945368e6d8ce7ca65b6396a1a5ede51b98968661 |
| freeradius-ldap-3.0.17-4.module+el8.0.0+3108+851cb559.ppc64le.rpm | SHA-256: 079af0486f93517a90ff48a1be66c75ce26e8f0c13949a48ffb5972768451e68 |
| freeradius-ldap-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.ppc64le.rpm | SHA-256: 3d1a41c008417a611dc82d214ff9d129672dbce64eb6306bc14bafe8c6d7435c |
| freeradius-mysql-3.0.17-4.module+el8.0.0+3108+851cb559.ppc64le.rpm | SHA-256: 76ad7f5d1ca6c80ed118f31f674b78c3ee10ef562fd5bc5f0bcaee9a2db1f54c |
| freeradius-mysql-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.ppc64le.rpm | SHA-256: 71c91b1b8efdec3179587be341cf8c6f19ddaf8be3be75bd900105be580f6f5d |
| freeradius-perl-3.0.17-4.module+el8.0.0+3108+851cb559.ppc64le.rpm | SHA-256: d7c7284370fcef50a1b5ea8f350b8dbd9d2b59508a292021b999a392e670e495 |
| freeradius-perl-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.ppc64le.rpm | SHA-256: 41d0a234a761e9787a9b21fede29f9f20997c9c5e563867d1482ca4414cf17a2 |
| freeradius-postgresql-3.0.17-4.module+el8.0.0+3108+851cb559.ppc64le.rpm | SHA-256: 13428882faec40dcf1cf4ea9d2b74c09fbcd8a0f099da670591fdccaf1cabddd |
| freeradius-postgresql-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.ppc64le.rpm | SHA-256: d70b4dcccbf79adcaaa6c1e298a4ac9b02e0e83f649d20a3b08e6b0f3af3e941 |
| freeradius-rest-3.0.17-4.module+el8.0.0+3108+851cb559.ppc64le.rpm | SHA-256: 1c92ea160cb501045f896201835505b37d5a8419386d936147b9d0935fbe1800 |
| freeradius-rest-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.ppc64le.rpm | SHA-256: 0bc2d560713db9d5b0f9b8544dce2fab43fd4a644e7109bf202059aa00f5b4ba |
| freeradius-sqlite-3.0.17-4.module+el8.0.0+3108+851cb559.ppc64le.rpm | SHA-256: 12080b44aaa7b77cdeed98ea8d28681306f8aad855046bc94a80fafd292340cf |
| freeradius-sqlite-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.ppc64le.rpm | SHA-256: 9792b82a90029cfad775542c35c1670ea305ab7c41ca1793a199372da07027cb |
| freeradius-unixODBC-3.0.17-4.module+el8.0.0+3108+851cb559.ppc64le.rpm | SHA-256: 1e7ee19bb63ede6310f83f6d60390567faad5f3bc7c5a5123afe4b47fab9d2b1 |
| freeradius-unixODBC-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.ppc64le.rpm | SHA-256: 81bbf2b6b7a82f689c7238acd3c6e3acbdf535f578d9bc11a3a8592343376b15 |
| freeradius-utils-3.0.17-4.module+el8.0.0+3108+851cb559.ppc64le.rpm | SHA-256: 2e7f135096bc7142d56d9bccc062956a3384ea2ddbc42a0e4f5da4a455b3096e |
| freeradius-utils-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.ppc64le.rpm | SHA-256: f6c6b483c57c73af8c049d641d2c375ae7091f499346ff7449139acfd5f6b871 |
Red Hat Enterprise Linux for ARM 64 8
| SRPM | |
|---|---|
| freeradius-3.0.17-4.module+el8.0.0+3108+851cb559.src.rpm | SHA-256: cb3bb50d638fbad4359e0705759aae04be1efae68ec1404f5d86c4353d7681c7 |
| aarch64 | |
| freeradius-3.0.17-4.module+el8.0.0+3108+851cb559.aarch64.rpm | SHA-256: 37c43e8dca2511833324bbbf6b618c8cb5d266807ba93773e78aa4178e8decb3 |
| freeradius-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.aarch64.rpm | SHA-256: bff1f7e7ba4e467a919a237125dd4fc6a6371dfaf977b561984195e161e709c9 |
| freeradius-debugsource-3.0.17-4.module+el8.0.0+3108+851cb559.aarch64.rpm | SHA-256: 614aead7dcc8265c7c65c6342fe214170eeeca15e9ea324f122c0c1d97af0125 |
| freeradius-devel-3.0.17-4.module+el8.0.0+3108+851cb559.aarch64.rpm | SHA-256: 1921b4258449eb796382fc3b0c6656b436d873292bc96a62dda602b4f46a08d7 |
| freeradius-doc-3.0.17-4.module+el8.0.0+3108+851cb559.aarch64.rpm | SHA-256: f58eca6b46d3504d597966ad4cec75a8cd7661c8eba37e5a8ed2e745a8f70796 |
| freeradius-krb5-3.0.17-4.module+el8.0.0+3108+851cb559.aarch64.rpm | SHA-256: a4e173a9934cbf5bb6d32f4732d62dba5d2748acd8f87af6c628627d2ec3d3c2 |
| freeradius-krb5-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.aarch64.rpm | SHA-256: 82dc11827024d6eb8b78a003b063d16d389d346cb341233f37f78a3bba12e26a |
| freeradius-ldap-3.0.17-4.module+el8.0.0+3108+851cb559.aarch64.rpm | SHA-256: 72c828dc5f5f4910efed8e2271ddb5b1c9f9b1e435a88fe9dbe378751fe0e362 |
| freeradius-ldap-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.aarch64.rpm | SHA-256: 612f57cc737b305cfd0a22dbd761b84e6e438d07fd446830f71630db5f153af6 |
| freeradius-mysql-3.0.17-4.module+el8.0.0+3108+851cb559.aarch64.rpm | SHA-256: 6db1e8fda6577c78590057672364299dad1fce8c3590682aad13d40f9a313f54 |
| freeradius-mysql-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.aarch64.rpm | SHA-256: 0230e727785bbca31bf5675141428449e17ab9731d12b1dcb100157436f38022 |
| freeradius-perl-3.0.17-4.module+el8.0.0+3108+851cb559.aarch64.rpm | SHA-256: 0a9b9559386522d58a2995c34547192aadb57db9366ffb454c0ec3bb60a703f5 |
| freeradius-perl-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.aarch64.rpm | SHA-256: 50be6fba60db80a1994f9b20bcd49649e1d349864a0b36363a99f5c71766c433 |
| freeradius-postgresql-3.0.17-4.module+el8.0.0+3108+851cb559.aarch64.rpm | SHA-256: f4baea3ee732b352b866f115ed0d6bacf89837910921087bd49142b75df907f0 |
| freeradius-postgresql-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.aarch64.rpm | SHA-256: f8246c252fff55bf053c97265befb4b7375a2486c5b7c710a9c95add7edc5b3e |
| freeradius-rest-3.0.17-4.module+el8.0.0+3108+851cb559.aarch64.rpm | SHA-256: f43684529c83fa65ada6c7199d191d2a10fb1d2db5d361d81f17a834a8164a7a |
| freeradius-rest-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.aarch64.rpm | SHA-256: 74100610ccdd336e38136e6f7410192a4bab4492bc6fa729efdbf64df213d650 |
| freeradius-sqlite-3.0.17-4.module+el8.0.0+3108+851cb559.aarch64.rpm | SHA-256: 10a65f3a6181fbac3bed2c0dbece1e6ad84460234b78953975aa72e19d00a594 |
| freeradius-sqlite-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.aarch64.rpm | SHA-256: 75a30c427bbe59643c35393e96b79a32fbd10ebdadfdcdb41f0b08fba979c79f |
| freeradius-unixODBC-3.0.17-4.module+el8.0.0+3108+851cb559.aarch64.rpm | SHA-256: 6d803309bb9ded6c52e5cd3648cc89694d0761fa52dbde991a2c749c57ad86a6 |
| freeradius-unixODBC-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.aarch64.rpm | SHA-256: 576fe371274477644c6b82769d10dc7a8635d4b7e90ae3e6ff5e751f09b3239c |
| freeradius-utils-3.0.17-4.module+el8.0.0+3108+851cb559.aarch64.rpm | SHA-256: cdc1d4d24cd1b8b17038a6f41a710ae1ccefa0c86ea843d6c2753c934c51c69d |
| freeradius-utils-debuginfo-3.0.17-4.module+el8.0.0+3108+851cb559.aarch64.rpm | SHA-256: 6e389dc789f0acdc72ebabfa167bf1cbdfda75845cc5342a7e96dafc9523107c |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.