Linux · Security advisory · November 10, 2020

ELSA-2020-4799: Security update for 13 packages

ELSA-2020-4799, released November 10, 2020, fixes 1 CVE across 13 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0222
82nd percentile

Fixed package versions

ProductReleaseFixed in
freeradiusol 80:3.0.20-3.module+el8.3.0+7821+dc9b437c
freeradius-develol 80:3.0.20-3.module+el8.3.0+7821+dc9b437c
freeradius-docol 80:3.0.20-3.module+el8.3.0+7821+dc9b437c
freeradius-krb5ol 80:3.0.20-3.module+el8.3.0+7821+dc9b437c
freeradius-ldapol 80:3.0.20-3.module+el8.3.0+7821+dc9b437c
freeradius-mysqlol 80:3.0.20-3.module+el8.3.0+7821+dc9b437c
freeradius-perlol 80:3.0.20-3.module+el8.3.0+7821+dc9b437c
freeradius-postgresqlol 80:3.0.20-3.module+el8.3.0+7821+dc9b437c
freeradius-restol 80:3.0.20-3.module+el8.3.0+7821+dc9b437c
freeradius-sqliteol 80:3.0.20-3.module+el8.3.0+7821+dc9b437c
freeradius-unixODBCol 80:3.0.20-3.module+el8.3.0+7821+dc9b437c
freeradius-utilsol 80:3.0.20-3.module+el8.3.0+7821+dc9b437c
python3-freeradiusol 80:3.0.20-3.module+el8.3.0+7821+dc9b437c

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2019-17185 freeradius-doc: FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) ser... 7.5 0.0222 None reported
Showing 1 to 1 of 1 1