Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2025-9615

Источник: debian

Описание

[avoid that non-admin user using other users' certificates]

Пакеты

ПакетСтатусВерсия исправленияРелизТип
network-managerfixed1.54.3-1package
network-managerignoredtrixiepackage
network-managerignoredbookwormpackage
network-managerignoredbullseyepackage

Примечания

  • https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/2324

  • https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/1809 (not yet public)

  • https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/2327 (nm-1-52 backport)

  • The issue is in network-manager and the CVE associated with it. A patched

  • network-manager daemon will refuse to activating the private connections from plugins

  • without the fix. The VPN plugins need a corresponding update to keep then functional

  • when private connections are configured.

Связанные уязвимости

ubuntu
около 1 месяца назад

[avoid that non-admin user using other users certificates]