Linux · Security advisory · February 12, 2025

RHSA-2025:1346: Security update for 26 packages

RHSA-2025:1346, released February 12, 2025, fixes 1 CVE across 26 products. One of them is being exploited (CVE-2020-11023); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
1
None rated Critical
Exploited
1
CVE-2020-11023
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.8489
99th percentile

Fixed package versions

ProductReleaseFixed in
cppRHEL 90:11.5.0-5.el9_5
gccRHEL 90:11.5.0-5.el9_5
gcc-c++RHEL 90:11.5.0-5.el9_5
gcc-gfortranRHEL 90:11.5.0-5.el9_5
gcc-offload-nvptxRHEL 90:11.5.0-5.el9_5
gcc-plugin-annobinRHEL 90:11.5.0-5.el9_5
gcc-plugin-develRHEL 90:11.5.0-5.el9_5
libasanRHEL 90:11.5.0-5.el9_5
libatomicRHEL 90:11.5.0-5.el9_5
libgccRHEL 90:11.5.0-5.el9_5
libgccjitRHEL 90:11.5.0-5.el9_5
libgccjit-develRHEL 90:11.5.0-5.el9_5
libgfortranRHEL 90:11.5.0-5.el9_5
libgompRHEL 90:11.5.0-5.el9_5
libgomp-offload-nvptxRHEL 90:11.5.0-5.el9_5
libitmRHEL 90:11.5.0-5.el9_5
libitm-develRHEL 90:11.5.0-5.el9_5
liblsanRHEL 90:11.5.0-5.el9_5
libquadmathRHEL 90:11.5.0-5.el9_5
libquadmath-develRHEL 90:11.5.0-5.el9_5
libstdc++RHEL 90:11.5.0-5.el9_5
libstdc++-develRHEL 90:11.5.0-5.el9_5
libstdc++-docsRHEL 90:11.5.0-5.el9_5
libstdc++-staticRHEL 90:11.5.0-5.el9_5
libtsanRHEL 90:11.5.0-5.el9_5
libubsanRHEL 90:11.5.0-5.el9_5

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2020-11023 apache-commons-collections: The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System. Secur... 6.1 0.8489 KEVExploited
Showing 1 to 1 of 1 1