Synopsis

Moderate: freeradius:3.0 security and bug fix update

Type/Severity

Security Advisory: Moderate

Topic

An update for the freeradius:3.0 module is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network.

Security Fix(es):

• freeradius: privilege escalation due to insecure logrotate configuration (CVE-2019-10143)
  

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.1 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 8 x86_64
• Red Hat Enterprise Linux for IBM z Systems 8 s390x
• Red Hat Enterprise Linux for Power, little endian 8 ppc64le
• Red Hat Enterprise Linux for ARM 64 8 aarch64

Fixes

• BZ - 1685546 - radiusd fails to resolve hostname in ipaddr if the hostname points to ipv6 address.
• BZ - 1705340 - CVE-2019-10143 freeradius: privilege escalation due to insecure logrotate configuration

CVEs

• CVE-2019-10143

References

• https://access.redhat.com/security/updates/classification/#moderate
• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.1_release_notes/

Red Hat Enterprise Linux for x86_64 8

SRPM
freeradius-3.0.17-6.module+el8.1.0+3392+9bd8939b.src.rpm	SHA-256: 877c4ee8a9061414f392d2323d3d74011957a35db039b7d8f6e2e50f62f2ade7
x86_64
freeradius-3.0.17-6.module+el8.1.0+3392+9bd8939b.x86_64.rpm	SHA-256: 0d7207a8beabb9d97b1afdee068845ad77a64768ec91ee8568d57c7ec776add7
freeradius-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.x86_64.rpm	SHA-256: 84379b4adf7c36d4f7eef2f32ba08c10f8b0b777f01040519c330799ef13abfc
freeradius-debugsource-3.0.17-6.module+el8.1.0+3392+9bd8939b.x86_64.rpm	SHA-256: 2192e3950115293cb86d7425b65b96751fd072889f118979c73a1a7ebc637614
freeradius-devel-3.0.17-6.module+el8.1.0+3392+9bd8939b.x86_64.rpm	SHA-256: 95fc6b3b9ff8737bd130c5001c12359848eeef96eb8958a6ae976735713ef4ac
freeradius-doc-3.0.17-6.module+el8.1.0+3392+9bd8939b.x86_64.rpm	SHA-256: e8e4e04997ed4df5ff05436bb886a0da7a77aaf6803edd56b3d4ca5047e01b8b
freeradius-krb5-3.0.17-6.module+el8.1.0+3392+9bd8939b.x86_64.rpm	SHA-256: 552a71ddc2407e7f087a15ca777278a2f0a11c6e8293433b1357aa33acf9172d
freeradius-krb5-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.x86_64.rpm	SHA-256: 1e633a43c620453f9c0517291fa4d330b6db9486290281a9b33502005824cc84
freeradius-ldap-3.0.17-6.module+el8.1.0+3392+9bd8939b.x86_64.rpm	SHA-256: b22e04964b5eb89245096c8aac304cad98a4511b4f9b5266eb203b99ce79a9a0
freeradius-ldap-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.x86_64.rpm	SHA-256: 556a54446fe51a3b7b8390054856fdf83054d80d0c629e5687eacce5a6e9aed7
freeradius-mysql-3.0.17-6.module+el8.1.0+3392+9bd8939b.x86_64.rpm	SHA-256: 55811c117cf02e336a8947ba4fa4c6d7d7d707eb017ad0aaca2bc24a59a76788
freeradius-mysql-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.x86_64.rpm	SHA-256: 21a5010be81096a5e8da962cc550e0cfe6f83c426e058622393ff179549f41f0
freeradius-perl-3.0.17-6.module+el8.1.0+3392+9bd8939b.x86_64.rpm	SHA-256: 768867179cdbe9b2412e7f28a0403049ccf71bc37abdea1a4d3cbccf00d52445
freeradius-perl-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.x86_64.rpm	SHA-256: b48af52d1d3358bfcf86f21dac9e7cd5c564ef8f218905433b0cdb9b961462d1
freeradius-postgresql-3.0.17-6.module+el8.1.0+3392+9bd8939b.x86_64.rpm	SHA-256: 0cac6d7fa7cd0c8cf7877fbe0eb622b98280507b2c42e2de653acd50840ef393
freeradius-postgresql-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.x86_64.rpm	SHA-256: 1e0f179a6d2a84aed3401a2e73e456411806d959585b5d69b702e0ad4588af7b
freeradius-rest-3.0.17-6.module+el8.1.0+3392+9bd8939b.x86_64.rpm	SHA-256: b6ced14294276faf73a8a27260953e071dda1c898d66cc4253d9d571edc822c5
freeradius-rest-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.x86_64.rpm	SHA-256: 491da88dad004c322aa3287cd2f295df793075445b720e4ae7ddb8e87e5239e6
freeradius-sqlite-3.0.17-6.module+el8.1.0+3392+9bd8939b.x86_64.rpm	SHA-256: 1c350cd2d6e1d3df747899f33c1d26e048f6e4f30bc0f39cca783226fcb25825
freeradius-sqlite-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.x86_64.rpm	SHA-256: 341ecb228bda563eb22e0810ff71df0f5bd75e2b5d0e9ef4ac9b4f830fd9193d
freeradius-unixODBC-3.0.17-6.module+el8.1.0+3392+9bd8939b.x86_64.rpm	SHA-256: ab8e1363be2fb35b987347b7410fe339f8c7d9ee2e43320c155e2e4d3401da85
freeradius-unixODBC-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.x86_64.rpm	SHA-256: 711950991414f3549cc47b1f98c05149f07392525626e722cfc4e5387f6a21d1
freeradius-utils-3.0.17-6.module+el8.1.0+3392+9bd8939b.x86_64.rpm	SHA-256: a8387dd265c8dc87cff62c6771bd1da3770f58c539f4955c8ad0cff8b1e716fc
freeradius-utils-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.x86_64.rpm	SHA-256: 679d7aa9cffe67dc88f375c155be0698e0eecb611e14962461dec57f1c9c3bd9

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
freeradius-3.0.17-6.module+el8.1.0+3392+9bd8939b.src.rpm	SHA-256: 877c4ee8a9061414f392d2323d3d74011957a35db039b7d8f6e2e50f62f2ade7
s390x
freeradius-3.0.17-6.module+el8.1.0+3392+9bd8939b.s390x.rpm	SHA-256: 84fc404f24de49a95508508e193df1c3dcdf9efd7f1eb872370f5a7affc14af9
freeradius-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.s390x.rpm	SHA-256: 384c4c6daad1a9b7e1bce33749025f8587d2af7282edb82827415943357325c2
freeradius-debugsource-3.0.17-6.module+el8.1.0+3392+9bd8939b.s390x.rpm	SHA-256: bb3ddebba498cb9519ba59165943a7d069c5fd25345edd6dc8e2876c39c9a3df
freeradius-devel-3.0.17-6.module+el8.1.0+3392+9bd8939b.s390x.rpm	SHA-256: 3a20e180722504601a245775ded5430e9fe5322cb46cfc80e902dd7ef483b45a
freeradius-doc-3.0.17-6.module+el8.1.0+3392+9bd8939b.s390x.rpm	SHA-256: 1ee6ac7b556e03e1be3b4667528d41134b960365aa158ad4527aad924556e5ca
freeradius-krb5-3.0.17-6.module+el8.1.0+3392+9bd8939b.s390x.rpm	SHA-256: 9723a6bf9805ab74b2a296b002e51a929b5def2b0a683f3ac9be2caf3c0d06f4
freeradius-krb5-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.s390x.rpm	SHA-256: 5af5973653b36aa4caeb93f8b942ee9b00f2a8efb4027d88925707d31b1efa87
freeradius-ldap-3.0.17-6.module+el8.1.0+3392+9bd8939b.s390x.rpm	SHA-256: abdd90f92c7d3409d1881388f7ab1619313acfc17fd233dbf2dda08083ea7920
freeradius-ldap-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.s390x.rpm	SHA-256: d8952b7df650d011fe0e96dc5fce65c2ae21b2242e1e4fdbda388a6ba3889a06
freeradius-mysql-3.0.17-6.module+el8.1.0+3392+9bd8939b.s390x.rpm	SHA-256: 1ad961beecf850c8eebe6123553c862a5525377a7824f512f5a5e5f1651e3e18
freeradius-mysql-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.s390x.rpm	SHA-256: 5e89a745558e9d573c3ccbc98925b5de12a59ed30de09329843bb997f73dbf31
freeradius-perl-3.0.17-6.module+el8.1.0+3392+9bd8939b.s390x.rpm	SHA-256: 092cd9019a4214c42d9e57238813f2cf2a60962cbd94ff05f0bd73acf59cc649
freeradius-perl-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.s390x.rpm	SHA-256: 2369b23fd181fa3c381d80f458f3ebf7fdd42ffc5d8443440e88e545a780a070
freeradius-postgresql-3.0.17-6.module+el8.1.0+3392+9bd8939b.s390x.rpm	SHA-256: 3f2dbbe2e256db952787600d63cff47316295d78e3e0089a79b1520a16810e5c
freeradius-postgresql-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.s390x.rpm	SHA-256: 1b3b15b0b42e70a298a1e323ec9f6b19db394a0dfb02f32f30d31cc7ad4e2c70
freeradius-rest-3.0.17-6.module+el8.1.0+3392+9bd8939b.s390x.rpm	SHA-256: a9d2f40725fd788deff61024f67216b0daa2fd60760132ce939a491b113236c9
freeradius-rest-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.s390x.rpm	SHA-256: 64f47721b90de89c82f744086ee0577ed38d908003cedcf680c8cba0a4fac0c6
freeradius-sqlite-3.0.17-6.module+el8.1.0+3392+9bd8939b.s390x.rpm	SHA-256: 033fec57fb69399b9a08b9090ce07124ce7cfad9b2f78095cf8875cd0018aef2
freeradius-sqlite-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.s390x.rpm	SHA-256: b40b36d352039520ce89a282027179dcdf6bf6719c66fb3d578e0a4e55dc1fb7
freeradius-unixODBC-3.0.17-6.module+el8.1.0+3392+9bd8939b.s390x.rpm	SHA-256: a5ac59f92fe71ebd497e93d33f283bd77deed43407e2e4a9d66d8d2d1001cd0c
freeradius-unixODBC-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.s390x.rpm	SHA-256: a60b62191f6c151b2df9d9de8dbd6991c653abdcc2acce9aaded1e817fbfb634
freeradius-utils-3.0.17-6.module+el8.1.0+3392+9bd8939b.s390x.rpm	SHA-256: 252ce2fe771636928d811babb32171f8075c7369157590a193d7f4afd5cc1ac9
freeradius-utils-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.s390x.rpm	SHA-256: 3130ec17314d74adcbb5847ed3730c01934c87bcd4a6dc6fa6f3015a5a286341

Red Hat Enterprise Linux for Power, little endian 8

SRPM
freeradius-3.0.17-6.module+el8.1.0+3392+9bd8939b.src.rpm	SHA-256: 877c4ee8a9061414f392d2323d3d74011957a35db039b7d8f6e2e50f62f2ade7
ppc64le
freeradius-3.0.17-6.module+el8.1.0+3392+9bd8939b.ppc64le.rpm	SHA-256: 60f3823ef577e077c7889f304dd6933b9a4e0e672aea95400a957a111ba886c8
freeradius-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.ppc64le.rpm	SHA-256: 203618c024b25c37fbac497687aa2c8eb40648b3fccea7f1603c187001b41193
freeradius-debugsource-3.0.17-6.module+el8.1.0+3392+9bd8939b.ppc64le.rpm	SHA-256: c628f208b7c6bbf8a509f65571dda575d4391d3290b956589bf75d7c3a925bc0
freeradius-devel-3.0.17-6.module+el8.1.0+3392+9bd8939b.ppc64le.rpm	SHA-256: fb71de5ff209b4030bdf55c12aab72fdff5179e061fe24692909ad06c7fa195a
freeradius-doc-3.0.17-6.module+el8.1.0+3392+9bd8939b.ppc64le.rpm	SHA-256: 9788f5999fefa5fcd63eae96bf870260fcd273ea969a5da7477e70b87caccdc4
freeradius-krb5-3.0.17-6.module+el8.1.0+3392+9bd8939b.ppc64le.rpm	SHA-256: e388f8120c0472c7d2291e7a89e306461d5031194881afcf02c65698377b469c
freeradius-krb5-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.ppc64le.rpm	SHA-256: f3ae81e99f2bbe6057cd6ee852cd18a0f5b366c07d4a573401626f631d299d1d
freeradius-ldap-3.0.17-6.module+el8.1.0+3392+9bd8939b.ppc64le.rpm	SHA-256: 4e0cb988305c0d75b7afdb573ff50c680636bf21a6e18a1e0bd7163580a4436a
freeradius-ldap-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.ppc64le.rpm	SHA-256: b1b5d719775aae7c995db24019870853a11fc0ef2efb1ec6d307d8946aad7277
freeradius-mysql-3.0.17-6.module+el8.1.0+3392+9bd8939b.ppc64le.rpm	SHA-256: 2eb279e4bc60cdce632f19fedf4d3fe1186937329a94f16d2f6d6edca3ffb638
freeradius-mysql-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.ppc64le.rpm	SHA-256: 153d7a52c912f2163a79fddda6ae3da57408eec339c3a55736a3b2b5e83a2af4
freeradius-perl-3.0.17-6.module+el8.1.0+3392+9bd8939b.ppc64le.rpm	SHA-256: a4efcb6fcab726cdd9c4b5e373c6c7ea181ba7596a5edb76ccac0201aca54001
freeradius-perl-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.ppc64le.rpm	SHA-256: f5ee4831a63b9df9d82c8cc579c6c1e2e68b24607eacca45562d6703c939eaa4
freeradius-postgresql-3.0.17-6.module+el8.1.0+3392+9bd8939b.ppc64le.rpm	SHA-256: 04747242ef7414b5e442271651b19d1cb313efdea9d13b1e4b559e567d405d47
freeradius-postgresql-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.ppc64le.rpm	SHA-256: feed66cc4a81da952a129892a91b4e6c7768f4f05a526a8ba63fbbf55e7716fd
freeradius-rest-3.0.17-6.module+el8.1.0+3392+9bd8939b.ppc64le.rpm	SHA-256: e3084e8f6d148af40be1637f0d2053869762bb2e09f41800d489d6b71a72c9de
freeradius-rest-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.ppc64le.rpm	SHA-256: b2e2d8c7ff60f08ba3905165f10fdae43adfbf87c31ff29120320c870016b360
freeradius-sqlite-3.0.17-6.module+el8.1.0+3392+9bd8939b.ppc64le.rpm	SHA-256: 1734f99893cfff62cd5079f52d6f6ba8b22998ce05eeabbdf153d48bbe187ab4
freeradius-sqlite-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.ppc64le.rpm	SHA-256: 7b6c269b36d9ac3e19d1b2a120034a7fcfbe58631a48d99f4d165e0c4b24fbeb
freeradius-unixODBC-3.0.17-6.module+el8.1.0+3392+9bd8939b.ppc64le.rpm	SHA-256: 797a3df6a4c4b890c38cd429cf5cb9d1d4f1e4c42b3e56b199e05e7cce01d7db
freeradius-unixODBC-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.ppc64le.rpm	SHA-256: f88c829d583e3ad44de0f5f34286999240bc2e2366b25107a2643d3b6d83844e
freeradius-utils-3.0.17-6.module+el8.1.0+3392+9bd8939b.ppc64le.rpm	SHA-256: 85ca4612dedd95bac83b699c9572321bd0f91995cac460fd46b4278b0d40c6f5
freeradius-utils-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.ppc64le.rpm	SHA-256: 944db999fae5397dd486f5f665eaf7e539674e115677abcaaab00d1b5421f5d3

Red Hat Enterprise Linux for ARM 64 8

SRPM
freeradius-3.0.17-6.module+el8.1.0+3392+9bd8939b.src.rpm	SHA-256: 877c4ee8a9061414f392d2323d3d74011957a35db039b7d8f6e2e50f62f2ade7
aarch64
freeradius-3.0.17-6.module+el8.1.0+3392+9bd8939b.aarch64.rpm	SHA-256: 81dc565777589d1bacff158263930d01bc708b7af684d0fb39f0dd0859ce0e07
freeradius-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.aarch64.rpm	SHA-256: fa79d4e6f99f000ff7bccf90aceba8390d6da6cf3a94170344c78752ec33d6f6
freeradius-debugsource-3.0.17-6.module+el8.1.0+3392+9bd8939b.aarch64.rpm	SHA-256: 6be2586588b3b7c3dae9207c8f8f7b45166ed7e903f80b97db2b3ee400ebc126
freeradius-devel-3.0.17-6.module+el8.1.0+3392+9bd8939b.aarch64.rpm	SHA-256: 5f589b301b9fbfe910eec92e2c4aad91e6fd5cf7b8d03f68017c06b5cba99504
freeradius-doc-3.0.17-6.module+el8.1.0+3392+9bd8939b.aarch64.rpm	SHA-256: 898c18acf2f5fa5a7447aff344aa5c4d88f2ba3b6b430eabe1536cfbd61733c2
freeradius-krb5-3.0.17-6.module+el8.1.0+3392+9bd8939b.aarch64.rpm	SHA-256: 54185edb350b4dcf4d0bf6915b5dfc08d741ad7434d1e4ea54b328053da1b655
freeradius-krb5-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.aarch64.rpm	SHA-256: 8f26e13644a8bd282f8d9415ddedc1cfb9ed16d05904191ecb8accd873a7c91a
freeradius-ldap-3.0.17-6.module+el8.1.0+3392+9bd8939b.aarch64.rpm	SHA-256: f70448dd3dac75567b773731354a69ffc5ed9ada75a62286c0181af8fe1e9982
freeradius-ldap-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.aarch64.rpm	SHA-256: 6368d2bd08a83648c95b8ef58cceb5c5da9374e178f4177f786f6b06a19cc930
freeradius-mysql-3.0.17-6.module+el8.1.0+3392+9bd8939b.aarch64.rpm	SHA-256: 454a38193981b16a32f9631c9e585aef9328fde517fda1fc9538b6ea35bf302a
freeradius-mysql-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.aarch64.rpm	SHA-256: 6e6c937303d6b003648b6edb2519fce8de1c84b119b18ce8e8464034703f63f7
freeradius-perl-3.0.17-6.module+el8.1.0+3392+9bd8939b.aarch64.rpm	SHA-256: 6d8c6cee956810e24188353edbb4a06edc873b80277e5daee5e0ba7e4d1b9f91
freeradius-perl-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.aarch64.rpm	SHA-256: 1cfad604c616e84f4a7f37ff816769d902f255cf78ed4d76555a502a4b29ab5e
freeradius-postgresql-3.0.17-6.module+el8.1.0+3392+9bd8939b.aarch64.rpm	SHA-256: b880e8205f89873fbaccdee8d7d12db861b912b5df6f67140f1fc160179b8391
freeradius-postgresql-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.aarch64.rpm	SHA-256: 587df9a4acba651008828c0bb4c7defe5e2804049c190bec1295e7eb5be617e9
freeradius-rest-3.0.17-6.module+el8.1.0+3392+9bd8939b.aarch64.rpm	SHA-256: f9ca6da6a00051a6b875c7bb3bc06f40e265a1015017617582cb93b382bb2bec
freeradius-rest-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.aarch64.rpm	SHA-256: 334b5b34027d8175baaf87d7c2d9df8f98388f7bdea7563dbd390d83d5b3553f
freeradius-sqlite-3.0.17-6.module+el8.1.0+3392+9bd8939b.aarch64.rpm	SHA-256: f5e7b30983a4542be728f60047721943f3a0215ddc12dd1293e2bb4d5019feab
freeradius-sqlite-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.aarch64.rpm	SHA-256: 8d6edd0ef7177595af9f76d0dfd7ec165c9fd0da896b37f5796a770c98999512
freeradius-unixODBC-3.0.17-6.module+el8.1.0+3392+9bd8939b.aarch64.rpm	SHA-256: 8f8e9038e966144740d30bc0d4de4fa76576319d6f5af8d57e663a8e41913205
freeradius-unixODBC-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.aarch64.rpm	SHA-256: cea85784eb8bb434ea9bb10c399b7b9f13a458b89718a9ebf816dfc22e0a56fa
freeradius-utils-3.0.17-6.module+el8.1.0+3392+9bd8939b.aarch64.rpm	SHA-256: 28aeaea5689faf97d49ddd7f592577a821ac8a1e0e996ccd940e381302954ebc
freeradius-utils-debuginfo-3.0.17-6.module+el8.1.0+3392+9bd8939b.aarch64.rpm	SHA-256: ae1bdc2ac46a3815b8456785d299e6b471f3519bd69ff2430679bba3cb1cb49d