Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

Fedora 39: FEDORA-2024-c395d8fef4 moderate: FreeRADIUS Forgery Threat

fedora
Calendar Grey July 18, 2024
Dist Fedora Esm H88
Updated FreeRADIUS server for Fedora 39 enhances security against impersonation risks with version 3.2.5.
Update to upstream release 3.2.5

Summary

The FreeRADIUS Server Project is a high performance and highly configurable

GPL'd free RADIUS server. The server is similar in some respects to

Livingston's 2.0 server. While FreeRADIUS started as a variant of the

Cistron RADIUS server, they don't share a lot in common any more. It now has

many more features than Cistron or Livingston, and is much more configurable.

FreeRADIUS is an Internet authentication daemon, which implements the RADIUS

protocol, as defined in RFC 2865 (and others). It allows Network Access

Servers (NAS boxes) to perform authentication for dial-up users. There are

also RADIUS clients available for Web servers, firewalls, Unix logins, and

more. Using RADIUS allows authentication and authorization for a network to

be centralized, and minimizes the amount of re-configuration which has to be

done when adding or deleting new users.

Update Information:

Update to upstream release 3.2.5

Change Log

* Tue Jul 9 2024 Antonio Torres - 3.2.5-1 - Update to upstream release 3.2.5

References


[ 1 ] Bug #2296625 - CVE-2024-3596 freeradius: forgery attack [fedora-39] https://bugzilla.redhat.com/show_bug.cgi?id=2296625

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-c395d8fef4' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Name: freeradius
Product: Fedora 39
Version: 3.2.5
Release: 1.fc39
Summary: High-performance and highly configurable free RADIUS server

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here