Linux · Security advisory · May 16, 2023

ALSA-2023:2870: Security update for 13 packages

ALSA-2023:2870, released May 16, 2023, fixes 3 CVEs across 13 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0121
68th percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 3 Routine 0

Fixed package versions

ProductReleaseFixed in
freeradiusalmalinux 83.0.20-14.module_el8.8.0+3469+c05aea40
freeradius-develalmalinux 83.0.20-14.module_el8.8.0+3469+c05aea40
freeradius-docalmalinux 83.0.20-14.module_el8.8.0+3469+c05aea40
freeradius-krb5almalinux 83.0.20-14.module_el8.8.0+3469+c05aea40
freeradius-ldapalmalinux 83.0.20-14.module_el8.8.0+3469+c05aea40
freeradius-mysqlalmalinux 83.0.20-14.module_el8.8.0+3469+c05aea40
freeradius-perlalmalinux 83.0.20-14.module_el8.8.0+3469+c05aea40
freeradius-postgresqlalmalinux 83.0.20-14.module_el8.8.0+3469+c05aea40
freeradius-restalmalinux 83.0.20-14.module_el8.8.0+3469+c05aea40
freeradius-sqlitealmalinux 83.0.20-14.module_el8.8.0+3469+c05aea40
freeradius-unixODBCalmalinux 83.0.20-14.module_el8.8.0+3469+c05aea40
freeradius-utilsalmalinux 83.0.20-14.module_el8.8.0+3469+c05aea40
python3-freeradiusalmalinux 83.0.20-14.module_el8.8.0+3469+c05aea40

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-41860 freeradius: FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) ser... 7.5 0.0121 None reported
High CVE-2022-41861 freeradius-memcached: A flaw was found in freeradius 7.5 0.0114 None reported
High CVE-2022-41859 freeradius: FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) ser... 7.5 0.0089 None reported
Showing 1 to 3 of 3 1