Описание
ELSA-2026-58555: NetworkManager security update (MODERATE)
[1.40.16-21.0.1]
- Add support for DAD_CONFLICT to nm-dispatcher
- Drop 777 permissions from Networkmanager-dispatcher drop-in directory [Orabug: 37581862]
- Add a dropin file to make Networkmanager-dispatcher persistent [Orabug: 36989910]
- disable MPTCP handling by default [Orabug: 35081472]
- Fix ignore-carrier logic [Orabug: 34956744]
- Disable regeneration of the documentation [Orabug: 34712048]
- add connectivity check via Oracle servers [Orabug: 32051972]
- Disable the build of NetworkManager-config-connectivity-* subpackage for 8.3
- Revert 'infiniband: avoid normalizing the p-key when reading from ifcfg'
[1:1.40.16-21]
- Fix CVE-2026-10805 (RHEL-191622)
Обновленные пакеты
Oracle Linux 8
Oracle Linux aarch64
NetworkManager-libnm-devel
1.40.16-21.0.1.el8_10
NetworkManager-cloud-setup
1.40.16-21.0.1.el8_10
NetworkManager
1.40.16-21.0.1.el8_10
NetworkManager-adsl
1.40.16-21.0.1.el8_10
NetworkManager-bluetooth
1.40.16-21.0.1.el8_10
NetworkManager-config-connectivity-oracle
1.40.16-21.0.1.el8_10
NetworkManager-config-server
1.40.16-21.0.1.el8_10
NetworkManager-dispatcher-routing-rules
1.40.16-21.0.1.el8_10
NetworkManager-initscripts-updown
1.40.16-21.0.1.el8_10
NetworkManager-libnm
1.40.16-21.0.1.el8_10
NetworkManager-ovs
1.40.16-21.0.1.el8_10
NetworkManager-ppp
1.40.16-21.0.1.el8_10
NetworkManager-team
1.40.16-21.0.1.el8_10
NetworkManager-tui
1.40.16-21.0.1.el8_10
NetworkManager-wifi
1.40.16-21.0.1.el8_10
NetworkManager-wwan
1.40.16-21.0.1.el8_10
Oracle Linux x86_64
NetworkManager-libnm-devel
1.40.16-21.0.1.el8_10
NetworkManager
1.40.16-21.0.1.el8_10
NetworkManager-adsl
1.40.16-21.0.1.el8_10
NetworkManager-config-connectivity-oracle
1.40.16-21.0.1.el8_10
NetworkManager-config-server
1.40.16-21.0.1.el8_10
NetworkManager-dispatcher-routing-rules
1.40.16-21.0.1.el8_10
NetworkManager-ovs
1.40.16-21.0.1.el8_10
NetworkManager-ppp
1.40.16-21.0.1.el8_10
NetworkManager-team
1.40.16-21.0.1.el8_10
NetworkManager-tui
1.40.16-21.0.1.el8_10
NetworkManager-wifi
1.40.16-21.0.1.el8_10
NetworkManager-wwan
1.40.16-21.0.1.el8_10
NetworkManager-cloud-setup
1.40.16-21.0.1.el8_10
NetworkManager-bluetooth
1.40.16-21.0.1.el8_10
NetworkManager-initscripts-updown
1.40.16-21.0.1.el8_10
NetworkManager-libnm
1.40.16-21.0.1.el8_10
Связанные CVE
Связанные уязвимости
A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager's dhclient backend when processing malformed Manufacturer Usage Description (MUD) URLs. A local user can exploit this flaw to escalate privileges by triggering a script via a crafted MUD URL, provided an administrator has explicitly configured NetworkManager to use dhclient. This issue does not affect default configurations of NetworkManager.
A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager's dhclient backend when processing malformed Manufacturer Usage Description (MUD) URLs. A local user can exploit this flaw to escalate privileges by triggering a script via a crafted MUD URL, provided an administrator has explicitly configured NetworkManager to use dhclient. This issue does not affect default configurations of NetworkManager.
A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager's dhclient backend when processing malformed Manufacturer Usage Description (MUD) URLs. A local user can exploit this flaw to escalate privileges by triggering a script via a crafted MUD URL, provided an administrator has explicitly configured NetworkManager to use dhclient. This issue does not affect default configurations of NetworkManager.
A flaw was found in NetworkManager. This local privilege escalation vu ...