Linux · Security advisory · February 13, 2025

ELSA-2025-1346: Security update for 26 packages

ELSA-2025-1346, released February 13, 2025, fixes 1 CVE across 26 products. One of them is being exploited (CVE-2020-11023); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
1
None rated Critical
Exploited
1
CVE-2020-11023
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.8489
99th percentile

Fixed package versions

ProductReleaseFixed in
cppol 90:11.5.0-5.0.1.el9_5
gccol 90:11.5.0-5.0.1.el9_5
gcc-c++ol 90:11.5.0-5.0.1.el9_5
gcc-gfortranol 90:11.5.0-5.0.1.el9_5
gcc-offload-nvptxol 90:11.5.0-5.0.1.el9_5
gcc-plugin-annobinol 90:11.5.0-5.0.1.el9_5
gcc-plugin-develol 90:11.5.0-5.0.1.el9_5
libasanol 90:11.5.0-5.0.1.el9_5
libatomicol 90:11.5.0-5.0.1.el9_5
libgccol 90:11.5.0-5.0.1.el9_5
libgccjitol 90:11.5.0-5.0.1.el9_5
libgccjit-develol 90:11.5.0-5.0.1.el9_5
libgfortranol 90:11.5.0-5.0.1.el9_5
libgompol 90:11.5.0-5.0.1.el9_5
libgomp-offload-nvptxol 90:11.5.0-5.0.1.el9_5
libitmol 90:11.5.0-5.0.1.el9_5
libitm-develol 90:11.5.0-5.0.1.el9_5
liblsanol 90:11.5.0-5.0.1.el9_5
libquadmathol 90:11.5.0-5.0.1.el9_5
libquadmath-develol 90:11.5.0-5.0.1.el9_5
libstdc++ol 90:11.5.0-5.0.1.el9_5
libstdc++-develol 90:11.5.0-5.0.1.el9_5
libstdc++-docsol 90:11.5.0-5.0.1.el9_5
libstdc++-staticol 90:11.5.0-5.0.1.el9_5
libtsanol 90:11.5.0-5.0.1.el9_5
libubsanol 90:11.5.0-5.0.1.el9_5

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2020-11023 apache-commons-collections: The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System. Secur... 6.1 0.8489 KEVExploited
Showing 1 to 1 of 1 1