ELSA-2017-1581

ELSA-2017-1581 - freeradius security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2017-06-28

Description

[3.0.4-8]
- Disable internal OpenSSL cache and fix session cache file permissions.
Resolves: Bug#1459131 CVE-2017-9148 freeradius: TLS resumption
authentication bypass

Related CVEs

CVE-2017-9148

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (x86_64)	freeradius-3.0.4-8.el7_3.src.rpm	97220c20591cd6882f650783e6c15e5e	ELSA-2020-3984
	freeradius-3.0.4-8.el7_3.x86_64.rpm	098b6751ce53f8fc1463c9661ccb8fab	ELSA-2020-3984
	freeradius-devel-3.0.4-8.el7_3.i686.rpm	4b4668191c87a2cc422994cf86395311	ELSA-2020-3984
	freeradius-devel-3.0.4-8.el7_3.x86_64.rpm	1da9b05be1087eacaea6d8e8a9ca28b8	ELSA-2020-3984
	freeradius-doc-3.0.4-8.el7_3.x86_64.rpm	bb094663030f1db311bdaa38723d7472	ELSA-2020-3984
	freeradius-krb5-3.0.4-8.el7_3.x86_64.rpm	471645cd9253b0597d68fcf5c9e65b16	ELSA-2020-3984
	freeradius-ldap-3.0.4-8.el7_3.x86_64.rpm	3fa72a975ef3f8a1c545f107f2bfb772	ELSA-2020-3984
	freeradius-mysql-3.0.4-8.el7_3.x86_64.rpm	2e61a274b751528c21a38a21b21a2cc6	ELSA-2020-3984
	freeradius-perl-3.0.4-8.el7_3.x86_64.rpm	2c6582847ec38549da0ef47ff2b673e4	ELSA-2020-3984
	freeradius-postgresql-3.0.4-8.el7_3.x86_64.rpm	f5c1b46a91d3f7a60d20cc21f126d9ee	ELSA-2020-3984
	freeradius-python-3.0.4-8.el7_3.x86_64.rpm	116e004030c4a082dd43c8084bcc3a43	ELSA-2020-3984
	freeradius-sqlite-3.0.4-8.el7_3.x86_64.rpm	73aaa279a0d6ec5f60c3d4da658a59bf	ELSA-2020-3984
	freeradius-unixODBC-3.0.4-8.el7_3.x86_64.rpm	01f4a5b703795d0c07636375cf387b8f	ELSA-2020-3984
	freeradius-utils-3.0.4-8.el7_3.x86_64.rpm	4570d37829224aac49ee8b61aaf14c74	ELSA-2020-3984

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team