Linux · Security advisory · January 16, 2025

ELSA-2025-0377: Security update for 16 packages

ELSA-2025-0377, released January 16, 2025, fixes 1 CVE across 16 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0406
90th percentile

Fixed package versions

ProductReleaseFixed in
NetworkManagerol 91:1.48.10-5.0.1.el9_5
NetworkManager-adslol 91:1.48.10-5.0.1.el9_5
NetworkManager-bluetoothol 91:1.48.10-5.0.1.el9_5
NetworkManager-cloud-setupol 91:1.48.10-5.0.1.el9_5
NetworkManager-config-connectivity-oracleol 91:1.48.10-5.0.1.el9_5
NetworkManager-config-serverol 91:1.48.10-5.0.1.el9_5
NetworkManager-dispatcher-routing-rulesol 91:1.48.10-5.0.1.el9_5
NetworkManager-initscripts-updownol 91:1.48.10-5.0.1.el9_5
NetworkManager-libnmol 91:1.48.10-5.0.1.el9_5
NetworkManager-libnm-develol 91:1.48.10-5.0.1.el9_5
NetworkManager-ovsol 91:1.48.10-5.0.1.el9_5
NetworkManager-pppol 91:1.48.10-5.0.1.el9_5
NetworkManager-teamol 91:1.48.10-5.0.1.el9_5
NetworkManager-tuiol 91:1.48.10-5.0.1.el9_5
NetworkManager-wifiol 91:1.48.10-5.0.1.el9_5
NetworkManager-wwanol 91:1.48.10-5.0.1.el9_5

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-3661 NetworkManager-cloud-setup: Security and Bug Fix(es): * NetworkManager: DHCP routing options can manipulate interface-based VPN traffic (CVE-202... 7.6 0.0406 None reported
Showing 1 to 1 of 1 1