Security update for freeradius-server SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:1018-1 Final 1 1 2020-04-17T06:39:32Z current 2020-04-17T06:39:32Z 2020-04-17T06:39:32Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for freeradius-server This update for freeradius-server fixes the following issues: - CVE-2019-13456: Fixed a side-channel password leak in EAP-pwd (bsc#1144524). - CVE-2019-17185: Fixed a debial of service due to multithreaded BN_CTX access (bsc#1166847). - Fixed an issue in TLS-EAP where the OCSP verification, when an intermediate client certificate was not explicitly trusted (bsc#1146848). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). HPE-Helion-OpenStack-8-2020-1018,SUSE-2020-1018,SUSE-OpenStack-Cloud-8-2020-1018,SUSE-OpenStack-Cloud-Crowbar-8-2020-1018,SUSE-SLE-SAP-12-SP3-2020-1018,SUSE-SLE-SDK-12-SP4-2020-1018,SUSE-SLE-SERVER-12-SP3-2020-1018,SUSE-SLE-SERVER-12-SP3-BCL-2020-1018,SUSE-SLE-SERVER-12-SP4-2020-1018,SUSE-Storage-5-2020-1018 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20201018-1/ Link for SUSE-SU-2020:1018-1 https://lists.suse.com/pipermail/sle-security-updates/2020-April/006713.html E-Mail link for SUSE-SU-2020:1018-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1144524 SUSE Bug 1144524 https://bugzilla.suse.com/1146848 SUSE Bug 1146848 https://bugzilla.suse.com/1166847 SUSE Bug 1166847 https://www.suse.com/security/cve/CVE-2019-13456/ SUSE CVE CVE-2019-13456 page https://www.suse.com/security/cve/CVE-2019-17185/ SUSE CVE CVE-2019-17185 page HPE Helion OpenStack 8 SUSE Enterprise Storage 5 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 freeradius-server-3.0.15-2.14.1 freeradius-server-doc-3.0.15-2.14.1 freeradius-server-krb5-3.0.15-2.14.1 freeradius-server-ldap-3.0.15-2.14.1 freeradius-server-libs-3.0.15-2.14.1 freeradius-server-mysql-3.0.15-2.14.1 freeradius-server-perl-3.0.15-2.14.1 freeradius-server-postgresql-3.0.15-2.14.1 freeradius-server-python-3.0.15-2.14.1 freeradius-server-sqlite-3.0.15-2.14.1 freeradius-server-utils-3.0.15-2.14.1 freeradius-server-devel-3.0.15-2.14.1 freeradius-server-3.0.15-2.14.1 as a component of HPE Helion OpenStack 8 freeradius-server-doc-3.0.15-2.14.1 as a component of HPE Helion OpenStack 8 freeradius-server-krb5-3.0.15-2.14.1 as a component of HPE Helion OpenStack 8 freeradius-server-ldap-3.0.15-2.14.1 as a component of HPE Helion OpenStack 8 freeradius-server-libs-3.0.15-2.14.1 as a component of HPE Helion OpenStack 8 freeradius-server-mysql-3.0.15-2.14.1 as a component of HPE Helion OpenStack 8 freeradius-server-perl-3.0.15-2.14.1 as a component of HPE Helion OpenStack 8 freeradius-server-postgresql-3.0.15-2.14.1 as a component of HPE Helion OpenStack 8 freeradius-server-python-3.0.15-2.14.1 as a component of HPE Helion OpenStack 8 freeradius-server-sqlite-3.0.15-2.14.1 as a component of HPE Helion OpenStack 8 freeradius-server-utils-3.0.15-2.14.1 as a component of HPE Helion OpenStack 8 freeradius-server-3.0.15-2.14.1 as a component of SUSE Enterprise Storage 5 freeradius-server-doc-3.0.15-2.14.1 as a component of SUSE Enterprise Storage 5 freeradius-server-krb5-3.0.15-2.14.1 as a component of SUSE Enterprise Storage 5 freeradius-server-ldap-3.0.15-2.14.1 as a component of SUSE Enterprise Storage 5 freeradius-server-libs-3.0.15-2.14.1 as a component of SUSE Enterprise Storage 5 freeradius-server-mysql-3.0.15-2.14.1 as a component of SUSE Enterprise Storage 5 freeradius-server-perl-3.0.15-2.14.1 as a component of SUSE Enterprise Storage 5 freeradius-server-postgresql-3.0.15-2.14.1 as a component of SUSE Enterprise Storage 5 freeradius-server-python-3.0.15-2.14.1 as a component of SUSE Enterprise Storage 5 freeradius-server-sqlite-3.0.15-2.14.1 as a component of SUSE Enterprise Storage 5 freeradius-server-utils-3.0.15-2.14.1 as a component of SUSE Enterprise Storage 5 freeradius-server-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL freeradius-server-doc-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL freeradius-server-krb5-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL freeradius-server-ldap-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL freeradius-server-libs-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL freeradius-server-mysql-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL freeradius-server-perl-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL freeradius-server-postgresql-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL freeradius-server-python-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL freeradius-server-sqlite-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL freeradius-server-utils-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL freeradius-server-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS freeradius-server-doc-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS freeradius-server-krb5-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS freeradius-server-ldap-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS freeradius-server-libs-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS freeradius-server-mysql-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS freeradius-server-perl-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS freeradius-server-postgresql-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS freeradius-server-python-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS freeradius-server-sqlite-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS freeradius-server-utils-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS freeradius-server-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server 12 SP4 freeradius-server-doc-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server 12 SP4 freeradius-server-krb5-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server 12 SP4 freeradius-server-ldap-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server 12 SP4 freeradius-server-libs-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server 12 SP4 freeradius-server-mysql-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server 12 SP4 freeradius-server-perl-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server 12 SP4 freeradius-server-postgresql-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server 12 SP4 freeradius-server-python-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server 12 SP4 freeradius-server-sqlite-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server 12 SP4 freeradius-server-utils-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server 12 SP4 freeradius-server-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 freeradius-server-doc-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 freeradius-server-krb5-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 freeradius-server-ldap-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 freeradius-server-libs-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 freeradius-server-mysql-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 freeradius-server-perl-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 freeradius-server-postgresql-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 freeradius-server-python-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 freeradius-server-sqlite-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 freeradius-server-utils-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 freeradius-server-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 freeradius-server-doc-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 freeradius-server-krb5-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 freeradius-server-ldap-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 freeradius-server-libs-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 freeradius-server-mysql-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 freeradius-server-perl-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 freeradius-server-postgresql-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 freeradius-server-python-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 freeradius-server-sqlite-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 freeradius-server-utils-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 freeradius-server-devel-3.0.15-2.14.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 freeradius-server-3.0.15-2.14.1 as a component of SUSE OpenStack Cloud 8 freeradius-server-doc-3.0.15-2.14.1 as a component of SUSE OpenStack Cloud 8 freeradius-server-krb5-3.0.15-2.14.1 as a component of SUSE OpenStack Cloud 8 freeradius-server-ldap-3.0.15-2.14.1 as a component of SUSE OpenStack Cloud 8 freeradius-server-libs-3.0.15-2.14.1 as a component of SUSE OpenStack Cloud 8 freeradius-server-mysql-3.0.15-2.14.1 as a component of SUSE OpenStack Cloud 8 freeradius-server-perl-3.0.15-2.14.1 as a component of SUSE OpenStack Cloud 8 freeradius-server-postgresql-3.0.15-2.14.1 as a component of SUSE OpenStack Cloud 8 freeradius-server-python-3.0.15-2.14.1 as a component of SUSE OpenStack Cloud 8 freeradius-server-sqlite-3.0.15-2.14.1 as a component of SUSE OpenStack Cloud 8 freeradius-server-utils-3.0.15-2.14.1 as a component of SUSE OpenStack Cloud 8 freeradius-server-3.0.15-2.14.1 as a component of SUSE OpenStack Cloud Crowbar 8 freeradius-server-doc-3.0.15-2.14.1 as a component of SUSE OpenStack Cloud Crowbar 8 freeradius-server-krb5-3.0.15-2.14.1 as a component of SUSE OpenStack Cloud Crowbar 8 freeradius-server-ldap-3.0.15-2.14.1 as a component of SUSE OpenStack Cloud Crowbar 8 freeradius-server-libs-3.0.15-2.14.1 as a component of SUSE OpenStack Cloud Crowbar 8 freeradius-server-mysql-3.0.15-2.14.1 as a component of SUSE OpenStack Cloud Crowbar 8 freeradius-server-perl-3.0.15-2.14.1 as a component of SUSE OpenStack Cloud Crowbar 8 freeradius-server-postgresql-3.0.15-2.14.1 as a component of SUSE OpenStack Cloud Crowbar 8 freeradius-server-python-3.0.15-2.14.1 as a component of SUSE OpenStack Cloud Crowbar 8 freeradius-server-sqlite-3.0.15-2.14.1 as a component of SUSE OpenStack Cloud Crowbar 8 freeradius-server-utils-3.0.15-2.14.1 as a component of SUSE OpenStack Cloud Crowbar 8 In FreeRADIUS 3.0 through 3.0.19, on average 1 in every 2048 EAP-pwd handshakes fails because the password element cannot be found within 10 iterations of the hunting and pecking loop. This leaks information that an attacker can use to recover the password of any user. This information leakage is similar to the "Dragonblood" attack and CVE-2019-9494. CVE-2019-13456 HPE Helion OpenStack 8:freeradius-server-3.0.15-2.14.1 HPE Helion OpenStack 8:freeradius-server-doc-3.0.15-2.14.1 HPE Helion OpenStack 8:freeradius-server-krb5-3.0.15-2.14.1 HPE Helion OpenStack 8:freeradius-server-ldap-3.0.15-2.14.1 HPE Helion OpenStack 8:freeradius-server-libs-3.0.15-2.14.1 HPE Helion OpenStack 8:freeradius-server-mysql-3.0.15-2.14.1 HPE Helion OpenStack 8:freeradius-server-perl-3.0.15-2.14.1 HPE Helion OpenStack 8:freeradius-server-postgresql-3.0.15-2.14.1 HPE Helion OpenStack 8:freeradius-server-python-3.0.15-2.14.1 HPE Helion OpenStack 8:freeradius-server-sqlite-3.0.15-2.14.1 HPE Helion OpenStack 8:freeradius-server-utils-3.0.15-2.14.1 SUSE Enterprise Storage 5:freeradius-server-3.0.15-2.14.1 SUSE Enterprise Storage 5:freeradius-server-doc-3.0.15-2.14.1 SUSE Enterprise Storage 5:freeradius-server-krb5-3.0.15-2.14.1 SUSE Enterprise Storage 5:freeradius-server-ldap-3.0.15-2.14.1 SUSE Enterprise Storage 5:freeradius-server-libs-3.0.15-2.14.1 SUSE Enterprise Storage 5:freeradius-server-mysql-3.0.15-2.14.1 SUSE Enterprise Storage 5:freeradius-server-perl-3.0.15-2.14.1 SUSE Enterprise Storage 5:freeradius-server-postgresql-3.0.15-2.14.1 SUSE Enterprise Storage 5:freeradius-server-python-3.0.15-2.14.1 SUSE Enterprise Storage 5:freeradius-server-sqlite-3.0.15-2.14.1 SUSE Enterprise Storage 5:freeradius-server-utils-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-BCL:freeradius-server-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-BCL:freeradius-server-doc-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-BCL:freeradius-server-krb5-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-BCL:freeradius-server-ldap-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-BCL:freeradius-server-libs-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-BCL:freeradius-server-mysql-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-BCL:freeradius-server-perl-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-BCL:freeradius-server-postgresql-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-BCL:freeradius-server-python-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-BCL:freeradius-server-sqlite-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-BCL:freeradius-server-utils-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-LTSS:freeradius-server-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-LTSS:freeradius-server-doc-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-LTSS:freeradius-server-krb5-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-LTSS:freeradius-server-ldap-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-LTSS:freeradius-server-libs-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-LTSS:freeradius-server-mysql-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-LTSS:freeradius-server-perl-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-LTSS:freeradius-server-postgresql-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-LTSS:freeradius-server-python-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-LTSS:freeradius-server-sqlite-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-LTSS:freeradius-server-utils-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP4:freeradius-server-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP4:freeradius-server-doc-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP4:freeradius-server-krb5-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP4:freeradius-server-ldap-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP4:freeradius-server-libs-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP4:freeradius-server-mysql-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP4:freeradius-server-perl-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP4:freeradius-server-postgresql-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP4:freeradius-server-python-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP4:freeradius-server-sqlite-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP4:freeradius-server-utils-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:freeradius-server-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:freeradius-server-doc-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:freeradius-server-krb5-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:freeradius-server-ldap-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:freeradius-server-libs-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:freeradius-server-mysql-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:freeradius-server-perl-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:freeradius-server-postgresql-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:freeradius-server-python-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:freeradius-server-sqlite-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:freeradius-server-utils-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:freeradius-server-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:freeradius-server-doc-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:freeradius-server-krb5-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:freeradius-server-ldap-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:freeradius-server-libs-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:freeradius-server-mysql-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:freeradius-server-perl-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:freeradius-server-postgresql-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:freeradius-server-python-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:freeradius-server-sqlite-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:freeradius-server-utils-3.0.15-2.14.1 SUSE Linux Enterprise Software Development Kit 12 SP4:freeradius-server-devel-3.0.15-2.14.1 SUSE OpenStack Cloud 8:freeradius-server-3.0.15-2.14.1 SUSE OpenStack Cloud 8:freeradius-server-doc-3.0.15-2.14.1 SUSE OpenStack Cloud 8:freeradius-server-krb5-3.0.15-2.14.1 SUSE OpenStack Cloud 8:freeradius-server-ldap-3.0.15-2.14.1 SUSE OpenStack Cloud 8:freeradius-server-libs-3.0.15-2.14.1 SUSE OpenStack Cloud 8:freeradius-server-mysql-3.0.15-2.14.1 SUSE OpenStack Cloud 8:freeradius-server-perl-3.0.15-2.14.1 SUSE OpenStack Cloud 8:freeradius-server-postgresql-3.0.15-2.14.1 SUSE OpenStack Cloud 8:freeradius-server-python-3.0.15-2.14.1 SUSE OpenStack Cloud 8:freeradius-server-sqlite-3.0.15-2.14.1 SUSE OpenStack Cloud 8:freeradius-server-utils-3.0.15-2.14.1 SUSE OpenStack Cloud Crowbar 8:freeradius-server-3.0.15-2.14.1 SUSE OpenStack Cloud Crowbar 8:freeradius-server-doc-3.0.15-2.14.1 SUSE OpenStack Cloud Crowbar 8:freeradius-server-krb5-3.0.15-2.14.1 SUSE OpenStack Cloud Crowbar 8:freeradius-server-ldap-3.0.15-2.14.1 SUSE OpenStack Cloud Crowbar 8:freeradius-server-libs-3.0.15-2.14.1 SUSE OpenStack Cloud Crowbar 8:freeradius-server-mysql-3.0.15-2.14.1 SUSE OpenStack Cloud Crowbar 8:freeradius-server-perl-3.0.15-2.14.1 SUSE OpenStack Cloud Crowbar 8:freeradius-server-postgresql-3.0.15-2.14.1 SUSE OpenStack Cloud Crowbar 8:freeradius-server-python-3.0.15-2.14.1 SUSE OpenStack Cloud Crowbar 8:freeradius-server-sqlite-3.0.15-2.14.1 SUSE OpenStack Cloud Crowbar 8:freeradius-server-utils-3.0.15-2.14.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201018-1/ https://www.suse.com/security/cve/CVE-2019-13456.html CVE-2019-13456 https://bugzilla.suse.com/1144524 SUSE Bug 1144524 https://bugzilla.suse.com/1166858 SUSE Bug 1166858 In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BN_CTX instance to handle all handshakes. This mean multiple threads use the same BN_CTX instance concurrently, resulting in crashes when concurrent EAP-pwd handshakes are initiated. This can be abused by an adversary as a Denial-of-Service (DoS) attack. CVE-2019-17185 HPE Helion OpenStack 8:freeradius-server-3.0.15-2.14.1 HPE Helion OpenStack 8:freeradius-server-doc-3.0.15-2.14.1 HPE Helion OpenStack 8:freeradius-server-krb5-3.0.15-2.14.1 HPE Helion OpenStack 8:freeradius-server-ldap-3.0.15-2.14.1 HPE Helion OpenStack 8:freeradius-server-libs-3.0.15-2.14.1 HPE Helion OpenStack 8:freeradius-server-mysql-3.0.15-2.14.1 HPE Helion OpenStack 8:freeradius-server-perl-3.0.15-2.14.1 HPE Helion OpenStack 8:freeradius-server-postgresql-3.0.15-2.14.1 HPE Helion OpenStack 8:freeradius-server-python-3.0.15-2.14.1 HPE Helion OpenStack 8:freeradius-server-sqlite-3.0.15-2.14.1 HPE Helion OpenStack 8:freeradius-server-utils-3.0.15-2.14.1 SUSE Enterprise Storage 5:freeradius-server-3.0.15-2.14.1 SUSE Enterprise Storage 5:freeradius-server-doc-3.0.15-2.14.1 SUSE Enterprise Storage 5:freeradius-server-krb5-3.0.15-2.14.1 SUSE Enterprise Storage 5:freeradius-server-ldap-3.0.15-2.14.1 SUSE Enterprise Storage 5:freeradius-server-libs-3.0.15-2.14.1 SUSE Enterprise Storage 5:freeradius-server-mysql-3.0.15-2.14.1 SUSE Enterprise Storage 5:freeradius-server-perl-3.0.15-2.14.1 SUSE Enterprise Storage 5:freeradius-server-postgresql-3.0.15-2.14.1 SUSE Enterprise Storage 5:freeradius-server-python-3.0.15-2.14.1 SUSE Enterprise Storage 5:freeradius-server-sqlite-3.0.15-2.14.1 SUSE Enterprise Storage 5:freeradius-server-utils-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-BCL:freeradius-server-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-BCL:freeradius-server-doc-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-BCL:freeradius-server-krb5-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-BCL:freeradius-server-ldap-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-BCL:freeradius-server-libs-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-BCL:freeradius-server-mysql-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-BCL:freeradius-server-perl-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-BCL:freeradius-server-postgresql-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-BCL:freeradius-server-python-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-BCL:freeradius-server-sqlite-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-BCL:freeradius-server-utils-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-LTSS:freeradius-server-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-LTSS:freeradius-server-doc-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-LTSS:freeradius-server-krb5-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-LTSS:freeradius-server-ldap-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-LTSS:freeradius-server-libs-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-LTSS:freeradius-server-mysql-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-LTSS:freeradius-server-perl-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-LTSS:freeradius-server-postgresql-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-LTSS:freeradius-server-python-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-LTSS:freeradius-server-sqlite-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP3-LTSS:freeradius-server-utils-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP4:freeradius-server-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP4:freeradius-server-doc-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP4:freeradius-server-krb5-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP4:freeradius-server-ldap-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP4:freeradius-server-libs-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP4:freeradius-server-mysql-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP4:freeradius-server-perl-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP4:freeradius-server-postgresql-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP4:freeradius-server-python-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP4:freeradius-server-sqlite-3.0.15-2.14.1 SUSE Linux Enterprise Server 12 SP4:freeradius-server-utils-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:freeradius-server-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:freeradius-server-doc-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:freeradius-server-krb5-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:freeradius-server-ldap-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:freeradius-server-libs-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:freeradius-server-mysql-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:freeradius-server-perl-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:freeradius-server-postgresql-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:freeradius-server-python-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:freeradius-server-sqlite-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:freeradius-server-utils-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:freeradius-server-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:freeradius-server-doc-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:freeradius-server-krb5-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:freeradius-server-ldap-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:freeradius-server-libs-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:freeradius-server-mysql-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:freeradius-server-perl-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:freeradius-server-postgresql-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:freeradius-server-python-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:freeradius-server-sqlite-3.0.15-2.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:freeradius-server-utils-3.0.15-2.14.1 SUSE Linux Enterprise Software Development Kit 12 SP4:freeradius-server-devel-3.0.15-2.14.1 SUSE OpenStack Cloud 8:freeradius-server-3.0.15-2.14.1 SUSE OpenStack Cloud 8:freeradius-server-doc-3.0.15-2.14.1 SUSE OpenStack Cloud 8:freeradius-server-krb5-3.0.15-2.14.1 SUSE OpenStack Cloud 8:freeradius-server-ldap-3.0.15-2.14.1 SUSE OpenStack Cloud 8:freeradius-server-libs-3.0.15-2.14.1 SUSE OpenStack Cloud 8:freeradius-server-mysql-3.0.15-2.14.1 SUSE OpenStack Cloud 8:freeradius-server-perl-3.0.15-2.14.1 SUSE OpenStack Cloud 8:freeradius-server-postgresql-3.0.15-2.14.1 SUSE OpenStack Cloud 8:freeradius-server-python-3.0.15-2.14.1 SUSE OpenStack Cloud 8:freeradius-server-sqlite-3.0.15-2.14.1 SUSE OpenStack Cloud 8:freeradius-server-utils-3.0.15-2.14.1 SUSE OpenStack Cloud Crowbar 8:freeradius-server-3.0.15-2.14.1 SUSE OpenStack Cloud Crowbar 8:freeradius-server-doc-3.0.15-2.14.1 SUSE OpenStack Cloud Crowbar 8:freeradius-server-krb5-3.0.15-2.14.1 SUSE OpenStack Cloud Crowbar 8:freeradius-server-ldap-3.0.15-2.14.1 SUSE OpenStack Cloud Crowbar 8:freeradius-server-libs-3.0.15-2.14.1 SUSE OpenStack Cloud Crowbar 8:freeradius-server-mysql-3.0.15-2.14.1 SUSE OpenStack Cloud Crowbar 8:freeradius-server-perl-3.0.15-2.14.1 SUSE OpenStack Cloud Crowbar 8:freeradius-server-postgresql-3.0.15-2.14.1 SUSE OpenStack Cloud Crowbar 8:freeradius-server-python-3.0.15-2.14.1 SUSE OpenStack Cloud Crowbar 8:freeradius-server-sqlite-3.0.15-2.14.1 SUSE OpenStack Cloud Crowbar 8:freeradius-server-utils-3.0.15-2.14.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201018-1/ https://www.suse.com/security/cve/CVE-2019-17185.html CVE-2019-17185 https://bugzilla.suse.com/1166847 SUSE Bug 1166847