Linux · Security advisory · July 31, 2024

ELSA-2024-4935: Security update for 13 packages

ELSA-2024-4935, released July 31, 2024, fixes 1 CVE across 13 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.1486
96th percentile

Fixed package versions

ProductReleaseFixed in
freeradiusol 90:3.0.21-40.el9_4
freeradius-develol 90:3.0.21-40.el9_4
freeradius-docol 90:3.0.21-40.el9_4
freeradius-krb5ol 90:3.0.21-40.el9_4
freeradius-ldapol 90:3.0.21-40.el9_4
freeradius-mysqlol 90:3.0.21-40.el9_4
freeradius-perlol 90:3.0.21-40.el9_4
freeradius-postgresqlol 90:3.0.21-40.el9_4
freeradius-restol 90:3.0.21-40.el9_4
freeradius-sqliteol 90:3.0.21-40.el9_4
freeradius-unixODBCol 90:3.0.21-40.el9_4
freeradius-utilsol 90:3.0.21-40.el9_4
python3-freeradiusol 90:3.0.21-40.el9_4

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-3596 CERT/CC: CVE-2024-3596 RADIUS Protocol Spoofing Vulnerability 9.0 0.1486 Exploitation Less Likely
Showing 1 to 1 of 1 1