Linux · Security advisory · July 31, 2024

ALSA-2024:4936: Security update for 13 packages

ALSA-2024:4936, released July 31, 2024, fixes 1 CVE across 13 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.1486
96th percentile

Fixed package versions

ProductReleaseFixed in
freeradiusalmalinux 83.0.20-15.module_el8.10.0+3873+5b7fed0f
freeradius-develalmalinux 83.0.20-15.module_el8.10.0+3873+5b7fed0f
freeradius-docalmalinux 83.0.20-15.module_el8.10.0+3873+5b7fed0f
freeradius-krb5almalinux 83.0.20-15.module_el8.10.0+3873+5b7fed0f
freeradius-ldapalmalinux 83.0.20-15.module_el8.10.0+3873+5b7fed0f
freeradius-mysqlalmalinux 83.0.20-15.module_el8.10.0+3873+5b7fed0f
freeradius-perlalmalinux 83.0.20-15.module_el8.10.0+3873+5b7fed0f
freeradius-postgresqlalmalinux 83.0.20-15.module_el8.10.0+3873+5b7fed0f
freeradius-restalmalinux 83.0.20-15.module_el8.10.0+3873+5b7fed0f
freeradius-sqlitealmalinux 83.0.20-15.module_el8.10.0+3873+5b7fed0f
freeradius-unixODBCalmalinux 83.0.20-15.module_el8.10.0+3873+5b7fed0f
freeradius-utilsalmalinux 83.0.20-15.module_el8.10.0+3873+5b7fed0f
python3-freeradiusalmalinux 83.0.20-15.module_el8.10.0+3873+5b7fed0f

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-3596 CERT/CC: CVE-2024-3596 RADIUS Protocol Spoofing Vulnerability 9.0 0.1486 Exploitation Less Likely
Showing 1 to 1 of 1 1