Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:4063-1

Опубликовано: 08 сент. 2026
Источник: suse-cvrf

Описание

Security update for NetworkManager

This update for NetworkManager fixes the following issues:

  • CVE-2026-10805: local privilege escalation via malformed MUD URLs in dhclient backend (bsc#1267696).
  • CVE-2026-19685: missing user ownership checks for 802.1X directory properties can allow WPA-Enterprise server certificate validation bypass (bsc#1276764).

Changes for NetworkManager:

  • Add config-server subpackage (bsc#1224868).

Список пакетов

Container suse/sle-micro/5.5:latest
NetworkManager-1.38.6-150500.3.10.1
NetworkManager-wwan-1.38.6-150500.3.10.1
libnm0-1.38.6-150500.3.10.1
Container suse/sle-micro/base-5.5:latest
NetworkManager-1.38.6-150500.3.10.1
libnm0-1.38.6-150500.3.10.1
Container suse/sle-micro/kvm-5.5:latest
NetworkManager-1.38.6-150500.3.10.1
libnm0-1.38.6-150500.3.10.1
Container suse/sle-micro/rt-5.5:latest
NetworkManager-1.38.6-150500.3.10.1
libnm0-1.38.6-150500.3.10.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
NetworkManager-1.38.6-150500.3.10.1
NetworkManager-wwan-1.38.6-150500.3.10.1
libnm0-1.38.6-150500.3.10.1
typelib-1_0-NM-1_0-1.38.6-150500.3.10.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
NetworkManager-1.38.6-150500.3.10.1
NetworkManager-wwan-1.38.6-150500.3.10.1
libnm0-1.38.6-150500.3.10.1
typelib-1_0-NM-1_0-1.38.6-150500.3.10.1
SUSE Linux Enterprise Micro 5.5
NetworkManager-1.38.6-150500.3.10.1
NetworkManager-bluetooth-1.38.6-150500.3.10.1
NetworkManager-cloud-setup-1.38.6-150500.3.10.1
NetworkManager-pppoe-1.38.6-150500.3.10.1
NetworkManager-tui-1.38.6-150500.3.10.1
NetworkManager-wwan-1.38.6-150500.3.10.1
libnm0-1.38.6-150500.3.10.1
typelib-1_0-NM-1_0-1.38.6-150500.3.10.1
SUSE Linux Enterprise Server 15 SP5-LTSS
NetworkManager-1.38.6-150500.3.10.1
NetworkManager-wwan-1.38.6-150500.3.10.1
libnm0-1.38.6-150500.3.10.1
typelib-1_0-NM-1_0-1.38.6-150500.3.10.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
NetworkManager-1.38.6-150500.3.10.1
NetworkManager-wwan-1.38.6-150500.3.10.1
libnm0-1.38.6-150500.3.10.1
typelib-1_0-NM-1_0-1.38.6-150500.3.10.1

Ссылки

Описание

A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager's dhclient backend when processing malformed Manufacturer Usage Description (MUD) URLs. A local user can exploit this flaw to escalate privileges by triggering a script via a crafted MUD URL, provided an administrator has explicitly configured NetworkManager to use dhclient. This issue does not affect default configurations of NetworkManager.

Затронутые продукты
Container suse/sle-micro/5.5:latest:NetworkManager-1.38.6-150500.3.10.1
Container suse/sle-micro/5.5:latest:NetworkManager-wwan-1.38.6-150500.3.10.1
Container suse/sle-micro/5.5:latest:libnm0-1.38.6-150500.3.10.1
Container suse/sle-micro/base-5.5:latest:NetworkManager-1.38.6-150500.3.10.1
Ссылки

Описание

NetworkManager did not apply the private_user restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise (802.1X) connection profile's CA path at an attacker-controlled directory, bypassing server certificate validation and enabling credential theft via a rogue access point.

Затронутые продукты
Container suse/sle-micro/5.5:latest:NetworkManager-1.38.6-150500.3.10.1
Container suse/sle-micro/5.5:latest:NetworkManager-wwan-1.38.6-150500.3.10.1
Container suse/sle-micro/5.5:latest:libnm0-1.38.6-150500.3.10.1
Container suse/sle-micro/base-5.5:latest:NetworkManager-1.38.6-150500.3.10.1
Ссылки