Skip to content
OpenAdvisories
Medium ELSA-2025-0288 1 CVE

Moderate: Bug fix of NetworkManager (Oracle Linux 8)

Published Jan 13, 2025 · Updated Jan 13, 2025

Summary

[1:1.40.16-18.0.1]
- disable MPTCP handling by default [Orabug: 35081472]
- Fix ignore-carrier logic [Orabug: 34956744]
- Disable regeneration of the documentation [Orabug: 34712048]
- add connectivity check via Oracle servers [Orabug: 32051972]
- Disable the build of NetworkManager-config-connectivity-* subpackage for 8.3
- Revert 'infiniband: avoid normalizing the p-key when reading from ifcfg'

[1:1.40.16-18]
- vpn: fix routing rules support in vpn conenctions (RHEL-73052)
- vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051)

[1:1.40.16-17]
- Rebuild to use the right tag

[1:1.40.16-16]
- Use /etc/hosts for hostname resolution (RHEL-53200)

Fixed packages 16

ReleasePackageFixed in
Oracle Linux · 8 NetworkManager 1:1.40.16-18.0.1.el8_10
Oracle Linux · 8 NetworkManager-adsl 1:1.40.16-18.0.1.el8_10
Oracle Linux · 8 NetworkManager-bluetooth 1:1.40.16-18.0.1.el8_10
Oracle Linux · 8 NetworkManager-cloud-setup 1:1.40.16-18.0.1.el8_10
Oracle Linux · 8 NetworkManager-config-connectivity-oracle 1:1.40.16-18.0.1.el8_10
Oracle Linux · 8 NetworkManager-config-server 1:1.40.16-18.0.1.el8_10
Oracle Linux · 8 NetworkManager-dispatcher-routing-rules 1:1.40.16-18.0.1.el8_10
Oracle Linux · 8 NetworkManager-initscripts-updown 1:1.40.16-18.0.1.el8_10
Oracle Linux · 8 NetworkManager-libnm 1:1.40.16-18.0.1.el8_10
Oracle Linux · 8 NetworkManager-libnm-devel 1:1.40.16-18.0.1.el8_10
Oracle Linux · 8 NetworkManager-ovs 1:1.40.16-18.0.1.el8_10
Oracle Linux · 8 NetworkManager-ppp 1:1.40.16-18.0.1.el8_10
Oracle Linux · 8 NetworkManager-team 1:1.40.16-18.0.1.el8_10
Oracle Linux · 8 NetworkManager-tui 1:1.40.16-18.0.1.el8_10
Oracle Linux · 8 NetworkManager-wifi 1:1.40.16-18.0.1.el8_10
Oracle Linux · 8 NetworkManager-wwan 1:1.40.16-18.0.1.el8_10

Vulnerabilities 1

  • High 7.6
    CVE-2024-3661 Public exploit

    DHCP routing options can manipulate interface-based VPN traffic

    DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network …