Security update for freeradius-server SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2017:0102-1 Final 1 1 2017-01-10T14:49:17Z current 2017-01-10T14:49:17Z 2017-01-10T14:49:17Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for freeradius-server This update of freeradius-server fixes several issues. Security issue fixed: - CVE-2015-4680: Fixed Insufficent CRL application for intermediate certificates (bsc#935573) Non security issues fixed: - Allows FreeRadius Server to start on SUSE Linux Enterprise Server 12 SP2 systems by relaxing a too strict openssl version check. (bsc#1013311) - Fixed radclient error free() invalid pointer (bsc#911886) - Fixed failing rebuild of freeradius-server package (bsc#951404) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-RPI-12-SP2-2017-44,SUSE-SLE-SDK-12-SP1-2017-44,SUSE-SLE-SDK-12-SP2-2017-44,SUSE-SLE-SERVER-12-SP1-2017-44,SUSE-SLE-SERVER-12-SP2-2017-44 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2017/suse-su-20170102-1/ Link for SUSE-SU-2017:0102-1 https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00010.html E-Mail link for SUSE-SU-2017:0102-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1013311 SUSE Bug 1013311 https://bugzilla.suse.com/911886 SUSE Bug 911886 https://bugzilla.suse.com/935573 SUSE Bug 935573 https://bugzilla.suse.com/951404 SUSE Bug 951404 https://www.suse.com/security/cve/CVE-2015-4680/ SUSE CVE CVE-2015-4680 page SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 freeradius-server-3.0.3-14.1 freeradius-server-doc-3.0.3-14.1 freeradius-server-krb5-3.0.3-14.1 freeradius-server-ldap-3.0.3-14.1 freeradius-server-libs-3.0.3-14.1 freeradius-server-mysql-3.0.3-14.1 freeradius-server-perl-3.0.3-14.1 freeradius-server-postgresql-3.0.3-14.1 freeradius-server-python-3.0.3-14.1 freeradius-server-sqlite-3.0.3-14.1 freeradius-server-utils-3.0.3-14.1 freeradius-server-devel-3.0.3-14.1 freeradius-server-3.0.3-14.1 as a component of SUSE Linux Enterprise Server 12 SP1 freeradius-server-doc-3.0.3-14.1 as a component of SUSE Linux Enterprise Server 12 SP1 freeradius-server-krb5-3.0.3-14.1 as a component of SUSE Linux Enterprise Server 12 SP1 freeradius-server-ldap-3.0.3-14.1 as a component of SUSE Linux Enterprise Server 12 SP1 freeradius-server-libs-3.0.3-14.1 as a component of SUSE Linux Enterprise Server 12 SP1 freeradius-server-mysql-3.0.3-14.1 as a component of SUSE Linux Enterprise Server 12 SP1 freeradius-server-perl-3.0.3-14.1 as a component of SUSE Linux Enterprise Server 12 SP1 freeradius-server-postgresql-3.0.3-14.1 as a component of SUSE Linux Enterprise Server 12 SP1 freeradius-server-python-3.0.3-14.1 as a component of SUSE Linux Enterprise Server 12 SP1 freeradius-server-sqlite-3.0.3-14.1 as a component of SUSE Linux Enterprise Server 12 SP1 freeradius-server-utils-3.0.3-14.1 as a component of SUSE Linux Enterprise Server 12 SP1 freeradius-server-3.0.3-14.1 as a component of SUSE Linux Enterprise Server 12 SP2 freeradius-server-doc-3.0.3-14.1 as a component of SUSE Linux Enterprise Server 12 SP2 freeradius-server-krb5-3.0.3-14.1 as a component of SUSE Linux Enterprise Server 12 SP2 freeradius-server-ldap-3.0.3-14.1 as a component of SUSE Linux Enterprise Server 12 SP2 freeradius-server-libs-3.0.3-14.1 as a component of SUSE Linux Enterprise Server 12 SP2 freeradius-server-mysql-3.0.3-14.1 as a component of SUSE Linux Enterprise Server 12 SP2 freeradius-server-perl-3.0.3-14.1 as a component of SUSE Linux Enterprise Server 12 SP2 freeradius-server-postgresql-3.0.3-14.1 as a component of SUSE Linux Enterprise Server 12 SP2 freeradius-server-python-3.0.3-14.1 as a component of SUSE Linux Enterprise Server 12 SP2 freeradius-server-sqlite-3.0.3-14.1 as a component of SUSE Linux Enterprise Server 12 SP2 freeradius-server-utils-3.0.3-14.1 as a component of SUSE Linux Enterprise Server 12 SP2 freeradius-server-3.0.3-14.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 freeradius-server-doc-3.0.3-14.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 freeradius-server-krb5-3.0.3-14.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 freeradius-server-ldap-3.0.3-14.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 freeradius-server-libs-3.0.3-14.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 freeradius-server-mysql-3.0.3-14.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 freeradius-server-perl-3.0.3-14.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 freeradius-server-postgresql-3.0.3-14.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 freeradius-server-python-3.0.3-14.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 freeradius-server-sqlite-3.0.3-14.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 freeradius-server-utils-3.0.3-14.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 freeradius-server-3.0.3-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 freeradius-server-doc-3.0.3-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 freeradius-server-krb5-3.0.3-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 freeradius-server-ldap-3.0.3-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 freeradius-server-libs-3.0.3-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 freeradius-server-mysql-3.0.3-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 freeradius-server-perl-3.0.3-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 freeradius-server-postgresql-3.0.3-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 freeradius-server-python-3.0.3-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 freeradius-server-sqlite-3.0.3-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 freeradius-server-utils-3.0.3-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 freeradius-server-3.0.3-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 freeradius-server-doc-3.0.3-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 freeradius-server-krb5-3.0.3-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 freeradius-server-ldap-3.0.3-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 freeradius-server-libs-3.0.3-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 freeradius-server-mysql-3.0.3-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 freeradius-server-perl-3.0.3-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 freeradius-server-postgresql-3.0.3-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 freeradius-server-python-3.0.3-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 freeradius-server-sqlite-3.0.3-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 freeradius-server-utils-3.0.3-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 freeradius-server-devel-3.0.3-14.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 freeradius-server-devel-3.0.3-14.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates. CVE-2015-4680 SUSE Linux Enterprise Server 12 SP1:freeradius-server-3.0.3-14.1 SUSE Linux Enterprise Server 12 SP1:freeradius-server-doc-3.0.3-14.1 SUSE Linux Enterprise Server 12 SP1:freeradius-server-krb5-3.0.3-14.1 SUSE Linux Enterprise Server 12 SP1:freeradius-server-ldap-3.0.3-14.1 SUSE Linux Enterprise Server 12 SP1:freeradius-server-libs-3.0.3-14.1 SUSE Linux Enterprise Server 12 SP1:freeradius-server-mysql-3.0.3-14.1 SUSE Linux Enterprise Server 12 SP1:freeradius-server-perl-3.0.3-14.1 SUSE Linux Enterprise Server 12 SP1:freeradius-server-postgresql-3.0.3-14.1 SUSE Linux Enterprise Server 12 SP1:freeradius-server-python-3.0.3-14.1 SUSE Linux Enterprise Server 12 SP1:freeradius-server-sqlite-3.0.3-14.1 SUSE Linux Enterprise Server 12 SP1:freeradius-server-utils-3.0.3-14.1 SUSE Linux Enterprise Server 12 SP2:freeradius-server-3.0.3-14.1 SUSE Linux Enterprise Server 12 SP2:freeradius-server-doc-3.0.3-14.1 SUSE Linux Enterprise Server 12 SP2:freeradius-server-krb5-3.0.3-14.1 SUSE Linux Enterprise Server 12 SP2:freeradius-server-ldap-3.0.3-14.1 SUSE Linux Enterprise Server 12 SP2:freeradius-server-libs-3.0.3-14.1 SUSE Linux Enterprise Server 12 SP2:freeradius-server-mysql-3.0.3-14.1 SUSE Linux Enterprise Server 12 SP2:freeradius-server-perl-3.0.3-14.1 SUSE Linux Enterprise Server 12 SP2:freeradius-server-postgresql-3.0.3-14.1 SUSE Linux Enterprise Server 12 SP2:freeradius-server-python-3.0.3-14.1 SUSE Linux Enterprise Server 12 SP2:freeradius-server-sqlite-3.0.3-14.1 SUSE Linux Enterprise Server 12 SP2:freeradius-server-utils-3.0.3-14.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:freeradius-server-3.0.3-14.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:freeradius-server-doc-3.0.3-14.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:freeradius-server-krb5-3.0.3-14.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:freeradius-server-ldap-3.0.3-14.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:freeradius-server-libs-3.0.3-14.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:freeradius-server-mysql-3.0.3-14.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:freeradius-server-perl-3.0.3-14.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:freeradius-server-postgresql-3.0.3-14.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:freeradius-server-python-3.0.3-14.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:freeradius-server-sqlite-3.0.3-14.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:freeradius-server-utils-3.0.3-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:freeradius-server-3.0.3-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:freeradius-server-doc-3.0.3-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:freeradius-server-krb5-3.0.3-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:freeradius-server-ldap-3.0.3-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:freeradius-server-libs-3.0.3-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:freeradius-server-mysql-3.0.3-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:freeradius-server-perl-3.0.3-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:freeradius-server-postgresql-3.0.3-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:freeradius-server-python-3.0.3-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:freeradius-server-sqlite-3.0.3-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:freeradius-server-utils-3.0.3-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:freeradius-server-3.0.3-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:freeradius-server-doc-3.0.3-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:freeradius-server-krb5-3.0.3-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:freeradius-server-ldap-3.0.3-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:freeradius-server-libs-3.0.3-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:freeradius-server-mysql-3.0.3-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:freeradius-server-perl-3.0.3-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:freeradius-server-postgresql-3.0.3-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:freeradius-server-python-3.0.3-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:freeradius-server-sqlite-3.0.3-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:freeradius-server-utils-3.0.3-14.1 SUSE Linux Enterprise Software Development Kit 12 SP1:freeradius-server-devel-3.0.3-14.1 SUSE Linux Enterprise Software Development Kit 12 SP2:freeradius-server-devel-3.0.3-14.1 important 4 AV:N/AC:H/Au:N/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20170102-1/ https://www.suse.com/security/cve/CVE-2015-4680.html CVE-2015-4680 https://bugzilla.suse.com/935573 SUSE Bug 935573