ALSA-2025:0288

See a problem?
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2025:0288.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2025:0288
Related
Published
2025-01-13T00:00:00Z
Modified
2026-02-04T03:40:49.907972Z
Summary
Moderate: Bug fix of NetworkManager
Details

Security and Bug Fix(es):

  • NetworkManager: DHCP routing options can manipulate interface-based VPN traffic (CVE-2024-3661)
  • Route to VPN server not stored in routing table that is specified by ipv4.route-table (JIRA:AlmaLinux-73051)
  • VPN connections do not support ipv4.routing-rules settings (JIRA:AlmaLinux-73052)
References

Affected packages

AlmaLinux:8
NetworkManager

Package

Name
NetworkManager
Purl
pkg:rpm/almalinux/NetworkManager

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:1.40.16-18.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2025:0288.json"
NetworkManager-adsl

Package

Name
NetworkManager-adsl
Purl
pkg:rpm/almalinux/NetworkManager-adsl

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:1.40.16-18.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2025:0288.json"
NetworkManager-bluetooth

Package

Name
NetworkManager-bluetooth
Purl
pkg:rpm/almalinux/NetworkManager-bluetooth

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:1.40.16-18.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2025:0288.json"
NetworkManager-cloud-setup

Package

Name
NetworkManager-cloud-setup
Purl
pkg:rpm/almalinux/NetworkManager-cloud-setup

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:1.40.16-18.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2025:0288.json"
NetworkManager-config-connectivity-redhat

Package

Name
NetworkManager-config-connectivity-redhat
Purl
pkg:rpm/almalinux/NetworkManager-config-connectivity-redhat

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:1.40.16-18.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2025:0288.json"
NetworkManager-config-server

Package

Name
NetworkManager-config-server
Purl
pkg:rpm/almalinux/NetworkManager-config-server

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:1.40.16-18.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2025:0288.json"
NetworkManager-dispatcher-routing-rules

Package

Name
NetworkManager-dispatcher-routing-rules
Purl
pkg:rpm/almalinux/NetworkManager-dispatcher-routing-rules

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:1.40.16-18.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2025:0288.json"
NetworkManager-initscripts-updown

Package

Name
NetworkManager-initscripts-updown
Purl
pkg:rpm/almalinux/NetworkManager-initscripts-updown

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:1.40.16-18.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2025:0288.json"
NetworkManager-libnm

Package

Name
NetworkManager-libnm
Purl
pkg:rpm/almalinux/NetworkManager-libnm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:1.40.16-18.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2025:0288.json"
NetworkManager-libnm-devel

Package

Name
NetworkManager-libnm-devel
Purl
pkg:rpm/almalinux/NetworkManager-libnm-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:1.40.16-18.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2025:0288.json"
NetworkManager-ovs

Package

Name
NetworkManager-ovs
Purl
pkg:rpm/almalinux/NetworkManager-ovs

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:1.40.16-18.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2025:0288.json"
NetworkManager-ppp

Package

Name
NetworkManager-ppp
Purl
pkg:rpm/almalinux/NetworkManager-ppp

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:1.40.16-18.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2025:0288.json"
NetworkManager-team

Package

Name
NetworkManager-team
Purl
pkg:rpm/almalinux/NetworkManager-team

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:1.40.16-18.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2025:0288.json"
NetworkManager-tui

Package

Name
NetworkManager-tui
Purl
pkg:rpm/almalinux/NetworkManager-tui

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:1.40.16-18.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2025:0288.json"
NetworkManager-wifi

Package

Name
NetworkManager-wifi
Purl
pkg:rpm/almalinux/NetworkManager-wifi

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:1.40.16-18.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2025:0288.json"
NetworkManager-wwan

Package

Name
NetworkManager-wwan
Purl
pkg:rpm/almalinux/NetworkManager-wwan

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:1.40.16-18.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2025:0288.json"