Linux · Security advisory · February 12, 2025

ELSA-2025-1301: Security update for 28 packages

ELSA-2025-1301, released February 12, 2025, fixes 1 CVE across 28 products. One of them is being exploited (CVE-2020-11023); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
1
None rated Critical
Exploited
1
CVE-2020-11023
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.8489
99th percentile

Fixed package versions

ProductReleaseFixed in
cppol 80:8.5.0-23.0.1.el8_10
gccol 80:8.5.0-23.0.1.el8_10
gcc-c++ol 80:8.5.0-23.0.1.el8_10
gcc-gdb-pluginol 80:8.5.0-23.0.1.el8_10
gcc-gfortranol 80:8.5.0-23.0.1.el8_10
gcc-offload-nvptxol 80:8.5.0-23.0.1.el8_10
gcc-plugin-annobinol 80:8.5.0-23.0.1.el8_10
gcc-plugin-develol 80:8.5.0-23.0.1.el8_10
libasanol 80:8.5.0-23.0.1.el8_10
libatomicol 80:8.5.0-23.0.1.el8_10
libatomic-staticol 80:8.5.0-23.0.1.el8_10
libgccol 80:8.5.0-23.0.1.el8_10
libgfortranol 80:8.5.0-23.0.1.el8_10
libgfortran-staticol 80:8.5.0-23.0.1.el8_10
libgompol 80:8.5.0-23.0.1.el8_10
libgomp-offload-nvptxol 80:8.5.0-23.0.1.el8_10
libitmol 80:8.5.0-23.0.1.el8_10
libitm-develol 80:8.5.0-23.0.1.el8_10
liblsanol 80:8.5.0-23.0.1.el8_10
libquadmathol 80:8.5.0-23.0.1.el8_10
libquadmath-develol 80:8.5.0-23.0.1.el8_10
libquadmath-staticol 80:8.5.0-23.0.1.el8_10
libstdc++ol 80:8.5.0-23.0.1.el8_10
libstdc++-develol 80:8.5.0-23.0.1.el8_10
libstdc++-docsol 80:8.5.0-23.0.1.el8_10
libstdc++-staticol 80:8.5.0-23.0.1.el8_10
libtsanol 80:8.5.0-23.0.1.el8_10
libubsanol 80:8.5.0-23.0.1.el8_10

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2020-11023 apache-commons-collections: The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System. Secur... 6.1 0.8489 KEVExploited
Showing 1 to 1 of 1 1