Linux · Security advisory · May 5, 2020

ELSA-2020-1672: Security update for 12 packages

ELSA-2020-1672, released May 5, 2020, fixes 1 CVE across 12 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0180
78th percentile

Fixed package versions

ProductReleaseFixed in
freeradiusol 80:3.0.17-7.module+el8.2.0+5505+9f97be83
freeradius-develol 80:3.0.17-7.module+el8.2.0+5505+9f97be83
freeradius-docol 80:3.0.17-7.module+el8.2.0+5505+9f97be83
freeradius-krb5ol 80:3.0.17-7.module+el8.2.0+5505+9f97be83
freeradius-ldapol 80:3.0.17-7.module+el8.2.0+5505+9f97be83
freeradius-mysqlol 80:3.0.17-7.module+el8.2.0+5505+9f97be83
freeradius-perlol 80:3.0.17-7.module+el8.2.0+5505+9f97be83
freeradius-postgresqlol 80:3.0.17-7.module+el8.2.0+5505+9f97be83
freeradius-restol 80:3.0.17-7.module+el8.2.0+5505+9f97be83
freeradius-sqliteol 80:3.0.17-7.module+el8.2.0+5505+9f97be83
freeradius-unixODBCol 80:3.0.17-7.module+el8.2.0+5505+9f97be83
freeradius-utilsol 80:3.0.17-7.module+el8.2.0+5505+9f97be83

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Routine CVE-2019-13456 freeradius-mysql: FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) ser... 6.5 0.0180 None reported
Showing 1 to 1 of 1 1