Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Fedora 41: NetworkManager-libreswan 2024-2e8944621e Security Advisory Updates

fedora
Calendar Grey October 26, 2024
Dist Fedora Esm H88
Local privilege escalation fixed in Fedora 41's NetworkManager-libreswan 1.2.24 update with advisory FEDORA-2024-2e8944621e.
This is an update to 1.2.24 release of NetworkManager-libreswan, the IPSec VPN plugin for NetworkManager

Summary

This package contains software for integrating the libreswan VPN software

with NetworkManager and the GNOME desktop

Update Information:

This is an update to 1.2.24 release of NetworkManager-libreswan, the IPSec VPN plugin for NetworkManager. It fixes a local privilege escalation bug due to improper escaping of Libreswan configuration. (CVE-2024-9050)

Change Log

* Tue Oct 22 2024 Lubomir Rintel - 1.2.24-1 - Update to 1.2.24 release - Fixes a local privilege escalation bug with severity "important" (CVE-2024-9050)

References


[ 1 ] Bug #2320956 - CVE-2024-9050 NetworkManager-libreswan: Local privilege escalation via leftupdown [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2320956

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-2e8944621e' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: NetworkManager-libreswan
Product: Fedora 41
Version: 1.2.24
Release: 1.fc41
URL:
Summary: NetworkManager VPN plug-in for IPsec VPN

Topics%20covered

Topics Covered

No topics assigned

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here