Linux · Security advisory · January 16, 2025

ALSA-2025:0377: Security update for 16 packages

ALSA-2025:0377, released January 16, 2025, fixes 1 CVE across 16 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0406
90th percentile

Fixed package versions

ProductReleaseFixed in
NetworkManageralmalinux 91:1.48.10-5.el9_5
NetworkManager-adslalmalinux 91:1.48.10-5.el9_5
NetworkManager-bluetoothalmalinux 91:1.48.10-5.el9_5
NetworkManager-cloud-setupalmalinux 91:1.48.10-5.el9_5
NetworkManager-config-connectivity-redhatalmalinux 91:1.48.10-5.el9_5
NetworkManager-config-serveralmalinux 91:1.48.10-5.el9_5
NetworkManager-dispatcher-routing-rulesalmalinux 91:1.48.10-5.el9_5
NetworkManager-initscripts-updownalmalinux 91:1.48.10-5.el9_5
NetworkManager-libnmalmalinux 91:1.48.10-5.el9_5
NetworkManager-libnm-develalmalinux 91:1.48.10-5.el9_5
NetworkManager-ovsalmalinux 91:1.48.10-5.el9_5
NetworkManager-pppalmalinux 91:1.48.10-5.el9_5
NetworkManager-teamalmalinux 91:1.48.10-5.el9_5
NetworkManager-tuialmalinux 91:1.48.10-5.el9_5
NetworkManager-wifialmalinux 91:1.48.10-5.el9_5
NetworkManager-wwanalmalinux 91:1.48.10-5.el9_5

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-3661 NetworkManager-cloud-setup: Security and Bug Fix(es): * NetworkManager: DHCP routing options can manipulate interface-based VPN traffic (CVE-202... 7.6 0.0406 None reported
Showing 1 to 1 of 1 1