shield Security update for freeradius-server

SUSE-SLE-SDK-12-SP4-2020-1018

This update for freeradius-server fixes the following issues: - CVE-2019-13456: Fixed a side-channel password leak in EAP-pwd (bsc#1144524). - CVE-2019-17185: Fixed a debial of service due to multithreaded BN_CTX access (bsc#1166847). - Fixed an issue in TLS-EAP where the OCSP verification, when an intermediate client certificate was not explicitly trusted (bsc#1146848).

• Release Date
  Apr 17 2020
• References
  Bugzilla: 1144524, 1146848, 1166847
  CVEs: CVE-2019-17185, CVE-2019-13456
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.4 ppc64le

• Packages
  freeradius-server
  RADIUS Server

  3.0.15-2.14.1

  lock src

  freeradius-server-devel
  FreeRADIUS Development Files

  3.0.15-2.14.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.4 x86_64

• Packages
  freeradius-server
  RADIUS Server

  3.0.15-2.14.1

  lock src

  freeradius-server-devel
  FreeRADIUS Development Files

  3.0.15-2.14.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.4 aarch64

• Packages
  freeradius-server
  RADIUS Server

  3.0.15-2.14.1

  lock src

  freeradius-server-devel
  FreeRADIUS Development Files

  3.0.15-2.14.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.4 s390x

• Packages
  freeradius-server
  RADIUS Server

  3.0.15-2.14.1

  lock src

  freeradius-server-devel
  FreeRADIUS Development Files

  3.0.15-2.14.1

  lock rpm