Linux · Security advisory · January 16, 2025

RHSA-2025:0377: Security update for 16 packages

RHSA-2025:0377, released January 16, 2025, fixes 1 CVE across 16 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0406
90th percentile

Fixed package versions

ProductReleaseFixed in
NetworkManagerRHEL 91:1.48.10-5.el9_5
NetworkManager-adslRHEL 91:1.48.10-5.el9_5
NetworkManager-bluetoothRHEL 91:1.48.10-5.el9_5
NetworkManager-cloud-setupRHEL 91:1.48.10-5.el9_5
NetworkManager-config-connectivity-redhatRHEL 91:1.48.10-5.el9_5
NetworkManager-config-serverRHEL 91:1.48.10-5.el9_5
NetworkManager-dispatcher-routing-rulesRHEL 91:1.48.10-5.el9_5
NetworkManager-initscripts-updownRHEL 91:1.48.10-5.el9_5
NetworkManager-libnmRHEL 91:1.48.10-5.el9_5
NetworkManager-libnm-develRHEL 91:1.48.10-5.el9_5
NetworkManager-ovsRHEL 91:1.48.10-5.el9_5
NetworkManager-pppRHEL 91:1.48.10-5.el9_5
NetworkManager-teamRHEL 91:1.48.10-5.el9_5
NetworkManager-tuiRHEL 91:1.48.10-5.el9_5
NetworkManager-wifiRHEL 91:1.48.10-5.el9_5
NetworkManager-wwanRHEL 91:1.48.10-5.el9_5

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-3661 NetworkManager-cloud-setup: Security and Bug Fix(es): * NetworkManager: DHCP routing options can manipulate interface-based VPN traffic (CVE-202... 7.6 0.0406 None reported
Showing 1 to 1 of 1 1