Linux · Security advisory · July 31, 2024

RHSA-2024:4936: Security update for 13 packages

RHSA-2024:4936, released July 31, 2024, fixes 1 CVE across 13 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.1486
96th percentile

Fixed package versions

ProductReleaseFixed in
freeradiusRHEL 80:3.0.20-15.module+el8.10.0+22065+aa3d48ca
freeradius-develRHEL 80:3.0.20-15.module+el8.10.0+22065+aa3d48ca
freeradius-docRHEL 80:3.0.20-15.module+el8.10.0+22065+aa3d48ca
freeradius-krb5RHEL 80:3.0.20-15.module+el8.10.0+22065+aa3d48ca
freeradius-ldapRHEL 80:3.0.20-15.module+el8.10.0+22065+aa3d48ca
freeradius-mysqlRHEL 80:3.0.20-15.module+el8.10.0+22065+aa3d48ca
freeradius-perlRHEL 80:3.0.20-15.module+el8.10.0+22065+aa3d48ca
freeradius-postgresqlRHEL 80:3.0.20-15.module+el8.10.0+22065+aa3d48ca
freeradius-restRHEL 80:3.0.20-15.module+el8.10.0+22065+aa3d48ca
freeradius-sqliteRHEL 80:3.0.20-15.module+el8.10.0+22065+aa3d48ca
freeradius-unixODBCRHEL 80:3.0.20-15.module+el8.10.0+22065+aa3d48ca
freeradius-utilsRHEL 80:3.0.20-15.module+el8.10.0+22065+aa3d48ca
python3-freeradiusRHEL 80:3.0.20-15.module+el8.10.0+22065+aa3d48ca

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-3596 CERT/CC: CVE-2024-3596 RADIUS Protocol Spoofing Vulnerability 9.0 0.1486 Exploitation Less Likely
Showing 1 to 1 of 1 1