ELSA-2017-1581

ELSA-2017-1581 - freeradius security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2017-06-28

Description

[3.0.4-8]
- Disable internal OpenSSL cache and fix session cache file permissions.
Resolves: Bug#1459131 CVE-2017-9148 freeradius: TLS resumption
authentication bypass

Related CVEs

CVE-2017-9148

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	freeradius-3.0.4-8.el7_3.src.rpm	6082c384c9d797467edddf2b1bd85f1b87f29498ef2aae4d3f648a8f172ab95d	ELSA-2024-4911	ol7_x86_64_latest_archive
	freeradius-3.0.4-8.el7_3.src.rpm	6082c384c9d797467edddf2b1bd85f1b87f29498ef2aae4d3f648a8f172ab95d	ELSA-2024-4911	ol7_x86_64_optional_archive
	freeradius-3.0.4-8.el7_3.src.rpm	6082c384c9d797467edddf2b1bd85f1b87f29498ef2aae4d3f648a8f172ab95d	ELSA-2024-4911	ol7_x86_64_u3_patch
	freeradius-3.0.4-8.el7_3.x86_64.rpm	6c4ff1f93de739dadbd3c1ea603f200ab6f3789cea7ea61cf192b369556dc334	ELSA-2024-4911	ol7_x86_64_latest_archive
	freeradius-3.0.4-8.el7_3.x86_64.rpm	6c4ff1f93de739dadbd3c1ea603f200ab6f3789cea7ea61cf192b369556dc334	ELSA-2024-4911	ol7_x86_64_u3_patch
	freeradius-devel-3.0.4-8.el7_3.i686.rpm	a63f0e304953af15598d9cbfbac4f1a77c68d606adb51e40f9af2bf06d6d4696	ELSA-2024-4911	ol7_x86_64_optional_archive
	freeradius-devel-3.0.4-8.el7_3.x86_64.rpm	f28b68beee6726f97ac2000b8a3cc950ddc531a4979c840d4e5a473bff118ca4	ELSA-2024-4911	ol7_x86_64_optional_archive
	freeradius-doc-3.0.4-8.el7_3.x86_64.rpm	758d00ba5bfb8aa9b13e3a8ee90da2b463575654be6ae728a1d1cff82818b885	ELSA-2024-4911	ol7_x86_64_optional_archive
	freeradius-krb5-3.0.4-8.el7_3.x86_64.rpm	7b6330872fec0f7fecf3b8f77ed1e973fa74ba357c2170d7a4f54bd279a95898	ELSA-2024-4911	ol7_x86_64_optional_archive
	freeradius-ldap-3.0.4-8.el7_3.x86_64.rpm	e53280c7e0f0c8a1980b1b7263025aba2359702bd263c03e265753e043ebf1d9	ELSA-2024-4911	ol7_x86_64_optional_archive
	freeradius-mysql-3.0.4-8.el7_3.x86_64.rpm	8bdbbc27f43d5f59ac037ef2a1e101b5d7bef52c9b28e44eff6fe8ca1ce3ed8b	ELSA-2024-4911	ol7_x86_64_optional_archive
	freeradius-perl-3.0.4-8.el7_3.x86_64.rpm	aa50a098796396614028635d16645f6e3f5a81afb45b0d28fd9285166851d57e	ELSA-2024-4911	ol7_x86_64_optional_archive
	freeradius-postgresql-3.0.4-8.el7_3.x86_64.rpm	7fe9d966f2f15530616bde0dcea5f696024b9173feddfef7351aef6ad130a2cc	ELSA-2024-4911	ol7_x86_64_optional_archive
	freeradius-python-3.0.4-8.el7_3.x86_64.rpm	c44ec600ad220309177df3f132b6c0975c4a8c1b39a76a630adf2b406e8450f6	ELSA-2024-4911	ol7_x86_64_optional_archive
	freeradius-sqlite-3.0.4-8.el7_3.x86_64.rpm	9497328a78da8c532a32b05a6e9868ae430abb63fdc27ef1bf0089f22f6a8fe0	ELSA-2024-4911	ol7_x86_64_optional_archive
	freeradius-unixODBC-3.0.4-8.el7_3.x86_64.rpm	9492596518a86669d44e523b67d24630c501b2bc2e722d656428738514d50460	ELSA-2024-4911	ol7_x86_64_optional_archive
	freeradius-utils-3.0.4-8.el7_3.x86_64.rpm	8ff5cd15ae0d3aa3ddf2119c3553798e6359058c50bc84a091924d578aa6d453	ELSA-2024-4911	ol7_x86_64_optional_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team