CLSA-2025-1763419211

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1763419211.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2025-1763419211
Upstream
  • CVE-2024-9050
Published
2025-11-17T22:40:15Z
Modified
2026-06-01T00:31:26.879624838Z
Summary
NetworkManager-libreswan: Fix of CVE-2024-9050
Details
  • CVE-2024-9050: sanitize VPN configuration input to prevent local privilege escalation via malicious 'leftupdown' key value
References

Affected packages

TuxCare:AlmaLinux:9.2 / NetworkManager-libreswan

Package

Name
NetworkManager-libreswan
Purl
pkg:rpm/tuxcare/NetworkManager-libreswan?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.2.14-1.el9.3.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1763419211.json"

TuxCare:AlmaLinux:9.2 / NetworkManager-libreswan-gnome

Package

Name
NetworkManager-libreswan-gnome
Purl
pkg:rpm/tuxcare/NetworkManager-libreswan-gnome?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.2.14-1.el9.3.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1763419211.json"