Linux · Security advisory · July 31, 2024

ELSA-2024-4936: Security update for 13 packages

ELSA-2024-4936, released July 31, 2024, fixes 1 CVE across 13 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.1486
96th percentile

Fixed package versions

ProductReleaseFixed in
freeradiusol 80:3.0.20-15.module+el8.10.0+90375+641abe33
freeradius-develol 80:3.0.20-15.module+el8.10.0+90375+641abe33
freeradius-docol 80:3.0.20-15.module+el8.10.0+90375+641abe33
freeradius-krb5ol 80:3.0.20-15.module+el8.10.0+90375+641abe33
freeradius-ldapol 80:3.0.20-15.module+el8.10.0+90375+641abe33
freeradius-mysqlol 80:3.0.20-15.module+el8.10.0+90375+641abe33
freeradius-perlol 80:3.0.20-15.module+el8.10.0+90375+641abe33
freeradius-postgresqlol 80:3.0.20-15.module+el8.10.0+90375+641abe33
freeradius-restol 80:3.0.20-15.module+el8.10.0+90375+641abe33
freeradius-sqliteol 80:3.0.20-15.module+el8.10.0+90375+641abe33
freeradius-unixODBCol 80:3.0.20-15.module+el8.10.0+90375+641abe33
freeradius-utilsol 80:3.0.20-15.module+el8.10.0+90375+641abe33
python3-freeradiusol 80:3.0.20-15.module+el8.10.0+90375+641abe33

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-3596 CERT/CC: CVE-2024-3596 RADIUS Protocol Spoofing Vulnerability 9.0 0.1486 Exploitation Less Likely
Showing 1 to 1 of 1 1