Linux · Security advisory · November 14, 2019

ELSA-2019-3353: Security update for 12 packages

ELSA-2019-3353, released November 14, 2019, fixes 1 CVE across 12 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0035
28th percentile

Fixed package versions

ProductReleaseFixed in
freeradiusol 80:3.0.17-6.module+el8.1.0+5424+14f3dc7c
freeradius-develol 80:3.0.17-6.module+el8.1.0+5424+14f3dc7c
freeradius-docol 80:3.0.17-6.module+el8.1.0+5424+14f3dc7c
freeradius-krb5ol 80:3.0.17-6.module+el8.1.0+5424+14f3dc7c
freeradius-ldapol 80:3.0.17-6.module+el8.1.0+5424+14f3dc7c
freeradius-mysqlol 80:3.0.17-6.module+el8.1.0+5424+14f3dc7c
freeradius-perlol 80:3.0.17-6.module+el8.1.0+5424+14f3dc7c
freeradius-postgresqlol 80:3.0.17-6.module+el8.1.0+5424+14f3dc7c
freeradius-restol 80:3.0.17-6.module+el8.1.0+5424+14f3dc7c
freeradius-sqliteol 80:3.0.17-6.module+el8.1.0+5424+14f3dc7c
freeradius-unixODBCol 80:3.0.17-6.module+el8.1.0+5424+14f3dc7c
freeradius-utilsol 80:3.0.17-6.module+el8.1.0+5424+14f3dc7c

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2019-10143 freeradius: FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) ser... 7.0 0.0035 None reported
Showing 1 to 1 of 1 1