freeradius: FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) ser...
CVE-2019-10143 is fixed in 12 products on 1 platform, first by RHSA-2019:3353, released November 5, 2019. It is not reported as exploited. Patch Radar priority: High.
FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network. Security Fix(es): * freeradius: privilege escalation due to insecure logrotate configuration (CVE-2019-10143) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.1 Release Notes linked from the References section.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| freeradius · RHEL 8 | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b | RHSA-2019:3353 | Nov 5, 2019 |
| freeradius · ol 8 | 0:3.0.17-6.module+el8.1.0+5424+14f3dc7c | ELSA-2019-3353 | Nov 14, 2019 |
| freeradius-devel · RHEL 8 | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b | RHSA-2019:3353 | Nov 5, 2019 |
| freeradius-devel · ol 8 | 0:3.0.17-6.module+el8.1.0+5424+14f3dc7c | ELSA-2019-3353 | Nov 14, 2019 |
| freeradius-doc · RHEL 8 | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b | RHSA-2019:3353 | Nov 5, 2019 |
| freeradius-doc · ol 8 | 0:3.0.17-6.module+el8.1.0+5424+14f3dc7c | ELSA-2019-3353 | Nov 14, 2019 |
| freeradius-krb5 · RHEL 8 | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b | RHSA-2019:3353 | Nov 5, 2019 |
| freeradius-krb5 · ol 8 | 0:3.0.17-6.module+el8.1.0+5424+14f3dc7c | ELSA-2019-3353 | Nov 14, 2019 |
| freeradius-ldap · RHEL 8 | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b | RHSA-2019:3353 | Nov 5, 2019 |
| freeradius-ldap · ol 8 | 0:3.0.17-6.module+el8.1.0+5424+14f3dc7c | ELSA-2019-3353 | Nov 14, 2019 |
| freeradius-mysql · RHEL 8 | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b | RHSA-2019:3353 | Nov 5, 2019 |
| freeradius-mysql · ol 8 | 0:3.0.17-6.module+el8.1.0+5424+14f3dc7c | ELSA-2019-3353 | Nov 14, 2019 |
| freeradius-perl · RHEL 8 | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b | RHSA-2019:3353 | Nov 5, 2019 |
| freeradius-perl · ol 8 | 0:3.0.17-6.module+el8.1.0+5424+14f3dc7c | ELSA-2019-3353 | Nov 14, 2019 |
| freeradius-postgresql · RHEL 8 | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b | RHSA-2019:3353 | Nov 5, 2019 |
| freeradius-postgresql · ol 8 | 0:3.0.17-6.module+el8.1.0+5424+14f3dc7c | ELSA-2019-3353 | Nov 14, 2019 |
| freeradius-rest · RHEL 8 | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b | RHSA-2019:3353 | Nov 5, 2019 |
| freeradius-rest · ol 8 | 0:3.0.17-6.module+el8.1.0+5424+14f3dc7c | ELSA-2019-3353 | Nov 14, 2019 |
| freeradius-sqlite · RHEL 8 | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b | RHSA-2019:3353 | Nov 5, 2019 |
| freeradius-sqlite · ol 8 | 0:3.0.17-6.module+el8.1.0+5424+14f3dc7c | ELSA-2019-3353 | Nov 14, 2019 |
| freeradius-unixODBC · RHEL 8 | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b | RHSA-2019:3353 | Nov 5, 2019 |
| freeradius-unixODBC · ol 8 | 0:3.0.17-6.module+el8.1.0+5424+14f3dc7c | ELSA-2019-3353 | Nov 14, 2019 |
| freeradius-utils · RHEL 8 | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b | RHSA-2019:3353 | Nov 5, 2019 |
| freeradius-utils · ol 8 | 0:3.0.17-6.module+el8.1.0+5424+14f3dc7c | ELSA-2019-3353 | Nov 14, 2019 |