Skip to content
OpenAdvisories
Medium ELSA-2025-0377 1 CVE

Moderate: Security and bug fixes for NetworkManager (Oracle Linux 9)

Published Jan 16, 2025 · Updated Jan 16, 2025

Summary

[1.48.10-5.0.1]
- disable MPTCP handling by default [Orabug: 34801142]
- add connectivity check via Oracle servers [Orabug: 32051972]

[1:1.48.10-5]
- vpn: Support routing rules in vpn conenctions (RHEL-73167)
- vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73166)

[1:1.48.10-4]
- Remove routes added by NetworkManager when doing reapply, also those not in main table (RHEL-73013)

Fixed packages 16

ReleasePackageFixed in
Oracle Linux · 9 NetworkManager 1:1.48.10-5.0.1.el9_5
Oracle Linux · 9 NetworkManager-adsl 1:1.48.10-5.0.1.el9_5
Oracle Linux · 9 NetworkManager-bluetooth 1:1.48.10-5.0.1.el9_5
Oracle Linux · 9 NetworkManager-cloud-setup 1:1.48.10-5.0.1.el9_5
Oracle Linux · 9 NetworkManager-config-connectivity-oracle 1:1.48.10-5.0.1.el9_5
Oracle Linux · 9 NetworkManager-config-server 1:1.48.10-5.0.1.el9_5
Oracle Linux · 9 NetworkManager-dispatcher-routing-rules 1:1.48.10-5.0.1.el9_5
Oracle Linux · 9 NetworkManager-initscripts-updown 1:1.48.10-5.0.1.el9_5
Oracle Linux · 9 NetworkManager-libnm 1:1.48.10-5.0.1.el9_5
Oracle Linux · 9 NetworkManager-libnm-devel 1:1.48.10-5.0.1.el9_5
Oracle Linux · 9 NetworkManager-ovs 1:1.48.10-5.0.1.el9_5
Oracle Linux · 9 NetworkManager-ppp 1:1.48.10-5.0.1.el9_5
Oracle Linux · 9 NetworkManager-team 1:1.48.10-5.0.1.el9_5
Oracle Linux · 9 NetworkManager-tui 1:1.48.10-5.0.1.el9_5
Oracle Linux · 9 NetworkManager-wifi 1:1.48.10-5.0.1.el9_5
Oracle Linux · 9 NetworkManager-wwan 1:1.48.10-5.0.1.el9_5

Vulnerabilities 1

  • High 7.6
    CVE-2024-3661 Public exploit

    DHCP routing options can manipulate interface-based VPN traffic

    DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network …