It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely.

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Debian:12 network-manager

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.2-1"}]}]

Debian:13 network-manager

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.2-1"}]}]

Debian:14 network-manager

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.2-1"}]}]

参照URL

advisory security-tracker.debian.org