SUSE-SU-2022:4622-1

Опубликовано: 27 дек. 2022

Источник: suse-cvrf

Описание

Security update for freeradius-server

This update for freeradius-server fixes the following issues:

CVE-2022-41859: Fixes an information leakage in EAP-PWD (bsc#1206204).
CVE-2022-41860: Fixes a crash on unknown option in EAP-SIM (bsc#1206205).
CVE-2022-41861: Fixes a crash on invalid abinary data (bsc#1206206).

Список пакетов

SUSE Enterprise Storage 7

freeradius-server-3.0.21-150200.3.12.1

freeradius-server-devel-3.0.21-150200.3.12.1

freeradius-server-krb5-3.0.21-150200.3.12.1

freeradius-server-ldap-3.0.21-150200.3.12.1

freeradius-server-libs-3.0.21-150200.3.12.1

freeradius-server-mysql-3.0.21-150200.3.12.1

freeradius-server-perl-3.0.21-150200.3.12.1

freeradius-server-postgresql-3.0.21-150200.3.12.1

freeradius-server-python3-3.0.21-150200.3.12.1

freeradius-server-sqlite-3.0.21-150200.3.12.1

freeradius-server-utils-3.0.21-150200.3.12.1

SUSE Enterprise Storage 7.1

freeradius-server-3.0.21-150200.3.12.1

freeradius-server-devel-3.0.21-150200.3.12.1

freeradius-server-krb5-3.0.21-150200.3.12.1

freeradius-server-ldap-3.0.21-150200.3.12.1

freeradius-server-libs-3.0.21-150200.3.12.1

freeradius-server-mysql-3.0.21-150200.3.12.1

freeradius-server-perl-3.0.21-150200.3.12.1

freeradius-server-postgresql-3.0.21-150200.3.12.1

freeradius-server-python3-3.0.21-150200.3.12.1

freeradius-server-sqlite-3.0.21-150200.3.12.1

freeradius-server-utils-3.0.21-150200.3.12.1

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

freeradius-server-3.0.21-150200.3.12.1

freeradius-server-devel-3.0.21-150200.3.12.1

freeradius-server-krb5-3.0.21-150200.3.12.1

freeradius-server-ldap-3.0.21-150200.3.12.1

freeradius-server-libs-3.0.21-150200.3.12.1

freeradius-server-mysql-3.0.21-150200.3.12.1

freeradius-server-perl-3.0.21-150200.3.12.1

freeradius-server-postgresql-3.0.21-150200.3.12.1

freeradius-server-python3-3.0.21-150200.3.12.1

freeradius-server-sqlite-3.0.21-150200.3.12.1

freeradius-server-utils-3.0.21-150200.3.12.1

SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS

freeradius-server-3.0.21-150200.3.12.1

freeradius-server-devel-3.0.21-150200.3.12.1

freeradius-server-krb5-3.0.21-150200.3.12.1

freeradius-server-ldap-3.0.21-150200.3.12.1

freeradius-server-libs-3.0.21-150200.3.12.1

freeradius-server-mysql-3.0.21-150200.3.12.1

freeradius-server-perl-3.0.21-150200.3.12.1

freeradius-server-postgresql-3.0.21-150200.3.12.1

freeradius-server-python3-3.0.21-150200.3.12.1

freeradius-server-sqlite-3.0.21-150200.3.12.1

freeradius-server-utils-3.0.21-150200.3.12.1

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

freeradius-server-3.0.21-150200.3.12.1

freeradius-server-devel-3.0.21-150200.3.12.1

freeradius-server-krb5-3.0.21-150200.3.12.1

freeradius-server-ldap-3.0.21-150200.3.12.1

freeradius-server-libs-3.0.21-150200.3.12.1

freeradius-server-mysql-3.0.21-150200.3.12.1

freeradius-server-perl-3.0.21-150200.3.12.1

freeradius-server-postgresql-3.0.21-150200.3.12.1

freeradius-server-python3-3.0.21-150200.3.12.1

freeradius-server-sqlite-3.0.21-150200.3.12.1

freeradius-server-utils-3.0.21-150200.3.12.1

SUSE Linux Enterprise Real Time 15 SP3

freeradius-server-3.0.21-150200.3.12.1

freeradius-server-devel-3.0.21-150200.3.12.1

freeradius-server-krb5-3.0.21-150200.3.12.1

freeradius-server-ldap-3.0.21-150200.3.12.1

freeradius-server-libs-3.0.21-150200.3.12.1

freeradius-server-mysql-3.0.21-150200.3.12.1

freeradius-server-perl-3.0.21-150200.3.12.1

freeradius-server-postgresql-3.0.21-150200.3.12.1

freeradius-server-python3-3.0.21-150200.3.12.1

freeradius-server-sqlite-3.0.21-150200.3.12.1

freeradius-server-utils-3.0.21-150200.3.12.1

SUSE Linux Enterprise Server 15 SP2-LTSS

freeradius-server-3.0.21-150200.3.12.1

freeradius-server-devel-3.0.21-150200.3.12.1

freeradius-server-krb5-3.0.21-150200.3.12.1

freeradius-server-ldap-3.0.21-150200.3.12.1

freeradius-server-libs-3.0.21-150200.3.12.1

freeradius-server-mysql-3.0.21-150200.3.12.1

freeradius-server-perl-3.0.21-150200.3.12.1

freeradius-server-postgresql-3.0.21-150200.3.12.1

freeradius-server-python3-3.0.21-150200.3.12.1

freeradius-server-sqlite-3.0.21-150200.3.12.1

freeradius-server-utils-3.0.21-150200.3.12.1

SUSE Linux Enterprise Server 15 SP3-LTSS

freeradius-server-3.0.21-150200.3.12.1

freeradius-server-devel-3.0.21-150200.3.12.1

freeradius-server-krb5-3.0.21-150200.3.12.1

freeradius-server-ldap-3.0.21-150200.3.12.1

freeradius-server-libs-3.0.21-150200.3.12.1

freeradius-server-mysql-3.0.21-150200.3.12.1

freeradius-server-perl-3.0.21-150200.3.12.1

freeradius-server-postgresql-3.0.21-150200.3.12.1

freeradius-server-python3-3.0.21-150200.3.12.1

freeradius-server-sqlite-3.0.21-150200.3.12.1

freeradius-server-utils-3.0.21-150200.3.12.1

SUSE Linux Enterprise Server for SAP Applications 15 SP2

freeradius-server-3.0.21-150200.3.12.1

freeradius-server-devel-3.0.21-150200.3.12.1

freeradius-server-krb5-3.0.21-150200.3.12.1

freeradius-server-ldap-3.0.21-150200.3.12.1

freeradius-server-libs-3.0.21-150200.3.12.1

freeradius-server-mysql-3.0.21-150200.3.12.1

freeradius-server-perl-3.0.21-150200.3.12.1

freeradius-server-postgresql-3.0.21-150200.3.12.1

freeradius-server-python3-3.0.21-150200.3.12.1

freeradius-server-sqlite-3.0.21-150200.3.12.1

freeradius-server-utils-3.0.21-150200.3.12.1

SUSE Linux Enterprise Server for SAP Applications 15 SP3

freeradius-server-3.0.21-150200.3.12.1

freeradius-server-devel-3.0.21-150200.3.12.1

freeradius-server-krb5-3.0.21-150200.3.12.1

freeradius-server-ldap-3.0.21-150200.3.12.1

freeradius-server-libs-3.0.21-150200.3.12.1

freeradius-server-mysql-3.0.21-150200.3.12.1

freeradius-server-perl-3.0.21-150200.3.12.1

freeradius-server-postgresql-3.0.21-150200.3.12.1

freeradius-server-python3-3.0.21-150200.3.12.1

freeradius-server-sqlite-3.0.21-150200.3.12.1

freeradius-server-utils-3.0.21-150200.3.12.1

SUSE Manager Proxy 4.1

freeradius-server-3.0.21-150200.3.12.1

freeradius-server-devel-3.0.21-150200.3.12.1

freeradius-server-krb5-3.0.21-150200.3.12.1

freeradius-server-ldap-3.0.21-150200.3.12.1

freeradius-server-libs-3.0.21-150200.3.12.1

freeradius-server-mysql-3.0.21-150200.3.12.1

freeradius-server-perl-3.0.21-150200.3.12.1

freeradius-server-postgresql-3.0.21-150200.3.12.1

freeradius-server-python3-3.0.21-150200.3.12.1

freeradius-server-sqlite-3.0.21-150200.3.12.1

freeradius-server-utils-3.0.21-150200.3.12.1

SUSE Manager Proxy 4.2

freeradius-server-3.0.21-150200.3.12.1

freeradius-server-devel-3.0.21-150200.3.12.1

freeradius-server-krb5-3.0.21-150200.3.12.1

freeradius-server-ldap-3.0.21-150200.3.12.1

freeradius-server-libs-3.0.21-150200.3.12.1

freeradius-server-mysql-3.0.21-150200.3.12.1

freeradius-server-perl-3.0.21-150200.3.12.1

freeradius-server-postgresql-3.0.21-150200.3.12.1

freeradius-server-python3-3.0.21-150200.3.12.1

freeradius-server-sqlite-3.0.21-150200.3.12.1

freeradius-server-utils-3.0.21-150200.3.12.1

SUSE Manager Retail Branch Server 4.1

freeradius-server-3.0.21-150200.3.12.1

freeradius-server-devel-3.0.21-150200.3.12.1

freeradius-server-krb5-3.0.21-150200.3.12.1

freeradius-server-ldap-3.0.21-150200.3.12.1

freeradius-server-libs-3.0.21-150200.3.12.1

freeradius-server-mysql-3.0.21-150200.3.12.1

freeradius-server-perl-3.0.21-150200.3.12.1

freeradius-server-postgresql-3.0.21-150200.3.12.1

freeradius-server-python3-3.0.21-150200.3.12.1

freeradius-server-sqlite-3.0.21-150200.3.12.1

freeradius-server-utils-3.0.21-150200.3.12.1

SUSE Manager Retail Branch Server 4.2

freeradius-server-3.0.21-150200.3.12.1

freeradius-server-devel-3.0.21-150200.3.12.1

freeradius-server-krb5-3.0.21-150200.3.12.1

freeradius-server-ldap-3.0.21-150200.3.12.1

freeradius-server-libs-3.0.21-150200.3.12.1

freeradius-server-mysql-3.0.21-150200.3.12.1

freeradius-server-perl-3.0.21-150200.3.12.1

freeradius-server-postgresql-3.0.21-150200.3.12.1

freeradius-server-python3-3.0.21-150200.3.12.1

freeradius-server-sqlite-3.0.21-150200.3.12.1

freeradius-server-utils-3.0.21-150200.3.12.1

SUSE Manager Server 4.1

freeradius-server-3.0.21-150200.3.12.1

freeradius-server-devel-3.0.21-150200.3.12.1

freeradius-server-krb5-3.0.21-150200.3.12.1

freeradius-server-ldap-3.0.21-150200.3.12.1

freeradius-server-libs-3.0.21-150200.3.12.1

freeradius-server-mysql-3.0.21-150200.3.12.1

freeradius-server-perl-3.0.21-150200.3.12.1

freeradius-server-postgresql-3.0.21-150200.3.12.1

freeradius-server-python3-3.0.21-150200.3.12.1

freeradius-server-sqlite-3.0.21-150200.3.12.1

freeradius-server-utils-3.0.21-150200.3.12.1

SUSE Manager Server 4.2

freeradius-server-3.0.21-150200.3.12.1

freeradius-server-devel-3.0.21-150200.3.12.1

freeradius-server-krb5-3.0.21-150200.3.12.1

freeradius-server-ldap-3.0.21-150200.3.12.1

freeradius-server-libs-3.0.21-150200.3.12.1

freeradius-server-mysql-3.0.21-150200.3.12.1

freeradius-server-perl-3.0.21-150200.3.12.1

freeradius-server-postgresql-3.0.21-150200.3.12.1

freeradius-server-python3-3.0.21-150200.3.12.1

freeradius-server-sqlite-3.0.21-150200.3.12.1

freeradius-server-utils-3.0.21-150200.3.12.1

openSUSE Leap 15.3

freeradius-server-3.0.21-150200.3.12.1

freeradius-server-devel-3.0.21-150200.3.12.1

freeradius-server-doc-3.0.21-150200.3.12.1

freeradius-server-krb5-3.0.21-150200.3.12.1

freeradius-server-ldap-3.0.21-150200.3.12.1

freeradius-server-libs-3.0.21-150200.3.12.1

freeradius-server-mysql-3.0.21-150200.3.12.1

freeradius-server-perl-3.0.21-150200.3.12.1

freeradius-server-postgresql-3.0.21-150200.3.12.1

freeradius-server-python3-3.0.21-150200.3.12.1

freeradius-server-sqlite-3.0.21-150200.3.12.1

freeradius-server-utils-3.0.21-150200.3.12.1

Ссылки

https://www.suse.com/support/update/announcement/2022/suse-su-20224622-1/
Link for SUSE-SU-2022:4622-1
https://lists.suse.com/pipermail/sle-security-updates/2022-December/013346.html
E-Mail link for SUSE-SU-2022:4622-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1206204
SUSE Bug 1206204
https://bugzilla.suse.com/1206205
SUSE Bug 1206205
https://bugzilla.suse.com/1206206
SUSE Bug 1206206
https://www.suse.com/security/cve/CVE-2022-41859/
SUSE CVE CVE-2022-41859 page
https://www.suse.com/security/cve/CVE-2022-41860/
SUSE CVE CVE-2022-41860 page
https://www.suse.com/security/cve/CVE-2022-41861/
SUSE CVE CVE-2022-41861 page

Описание

In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.

Затронутые продукты

SUSE Enterprise Storage 7.1:freeradius-server-3.0.21-150200.3.12.1

SUSE Enterprise Storage 7.1:freeradius-server-devel-3.0.21-150200.3.12.1

SUSE Enterprise Storage 7.1:freeradius-server-krb5-3.0.21-150200.3.12.1

SUSE Enterprise Storage 7.1:freeradius-server-ldap-3.0.21-150200.3.12.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-41859.html
CVE-2022-41859
https://bugzilla.suse.com/1206204
SUSE Bug 1206204

Описание

In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash.

Затронутые продукты

SUSE Enterprise Storage 7.1:freeradius-server-3.0.21-150200.3.12.1

SUSE Enterprise Storage 7.1:freeradius-server-devel-3.0.21-150200.3.12.1

SUSE Enterprise Storage 7.1:freeradius-server-krb5-3.0.21-150200.3.12.1

SUSE Enterprise Storage 7.1:freeradius-server-ldap-3.0.21-150200.3.12.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-41860.html
CVE-2022-41860
https://bugzilla.suse.com/1206205
SUSE Bug 1206205

Описание

A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash.

Затронутые продукты

SUSE Enterprise Storage 7.1:freeradius-server-3.0.21-150200.3.12.1

SUSE Enterprise Storage 7.1:freeradius-server-devel-3.0.21-150200.3.12.1

SUSE Enterprise Storage 7.1:freeradius-server-krb5-3.0.21-150200.3.12.1

SUSE Enterprise Storage 7.1:freeradius-server-ldap-3.0.21-150200.3.12.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-41861.html
CVE-2022-41861
https://bugzilla.suse.com/1206206
SUSE Bug 1206206

SUSE-SU-2022:4622-1

Описание

Список пакетов

SUSE Enterprise Storage 7

SUSE Enterprise Storage 7.1

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

SUSE Linux Enterprise Real Time 15 SP3

SUSE Linux Enterprise Server 15 SP2-LTSS

SUSE Linux Enterprise Server 15 SP3-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP2

SUSE Linux Enterprise Server for SAP Applications 15 SP3

SUSE Manager Proxy 4.1

SUSE Manager Proxy 4.2

SUSE Manager Retail Branch Server 4.1

SUSE Manager Retail Branch Server 4.2

SUSE Manager Server 4.1

SUSE Manager Server 4.2

openSUSE Leap 15.3

Ссылки

Уязвимость: CVE-2022-41859

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2022-41860

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2022-41861

Описание

Затронутые продукты

Ссылки