Explore top 10 tips to secure your open-source projects now. Read More
×
Red Hat: RHSA-2016-2581-02 Low: NetworkManager Race Condition Issue
red hat
November 3, 2016
An update for NetworkManager is now available for Red Hat Enterprise Linux 7
Solution
For details on how to apply this update, which includes the changes
described in this advisory, refer to:
https://access.redhat.com/articles/11258
Summary
NetworkManager is a system network service that manages network devices and
connections, attempting to keep active network connectivity when available.
Its capabilities include managing Ethernet, wireless, mobile broadband
(WWAN), and PPPoE devices, as well as providing VPN integration with a
variety of different VPN services.
The following packages have been upgraded to a newer upstream version:
NetworkManager (1.4.0), NetworkManager-libreswan (1.2.4),
network-manager-applet (1.4.0), libnl3 (3.2.28). (BZ#1264552, BZ#1296058,
BZ#1032717, BZ#1271581)
Security Fix(es):
* A race condition vulnerability was discovered in NetworkManager.
Temporary files were created insecurely when saving or updating connection
settings, which could allow local users to read connection secrets such as
VPN passwords or WiFi keys. (CVE-2016-0764)
Additional Changes:
For detailed information on changes in this release, see the Red Hat
Enterprise Linux 7.3 Release Notes linked from the References section.
References
https://access.redhat.com/security/cve/CVE-2016-0764 https://access.redhat.com/security/updates/classification#low https://docs.redhat.com/en/documentation/Red_Hat_Enterprise_Linux/7/html/7.3_Release_Notes/index.html
Package List
Red Hat Enterprise Linux Client (v. 7):
Source:
NetworkManager-1.4.0-12.el7.src.rpm
NetworkManager-libreswan-1.2.4-1.el7.src.rpm
libnl3-3.2.28-2.el7.src.rpm
network-manager-applet-1.4.0-2.el7.src.rpm
x86_64:
NetworkManager-1.4.0-12.el7.x86_64.rpm
NetworkManager-adsl-1.4.0-12.el7.x86_64.rpm
NetworkManager-bluetooth-1.4.0-12.el7.x86_64.rpm
NetworkManager-debuginfo-1.4.0-12.el7.i686.rpm
NetworkManager-debuginfo-1.4.0-12.el7.x86_64.rpm
NetworkManager-glib-1.4.0-12.el7.i686.rpm
NetworkManager-glib-1.4.0-12.el7.x86_64.rpm
NetworkManager-libnm-1.4.0-12.el7.i686.rpm
NetworkManager-libnm-1.4.0-12.el7.x86_64.rpm
NetworkManager-libreswan-1.2.4-1.el7.x86_64.rpm
NetworkManager-libreswan-debuginfo-1.2.4-1.el7.x86_64.rpm
NetworkManager-libreswan-gnome-1.2.4-1.el7.x86_64.rpm
NetworkManager-team-1.4.0-12.el7.x86_64.rpm
NetworkManager-tui-1.4.0-12.el7.x86_64.rpm
NetworkManager-wifi-1.4.0-12.el7.x86_64.rpm
NetworkManager-wwan-1.4.0-12.el7.x86_64.rpm
libnl3-3.2.28-2.el7.i686.rpm
libnl3-3.2.28-2.el7.x86_64.rpm
libnl3-cli-3.2.28-2.el7.i686.rpm
libnl3-cli-3.2.28-2.el7.x86_64.rpm
libnl3-debuginfo-3.2.28-2.el7.i686.rpm
libnl3-debuginfo-3.2.28-2.el7.x86_64.rpm
libnm-gtk-1.4.0-2.el7.i686.rpm
libnm-gtk-1.4.0-2.el7.x86_64.rpm
libnma-1.4.0-2.el7.i686.rpm
libnma-1.4.0-2.el7.x86_64.rpm
Read the Full Advisory
PREVIOUS
NEXT
Severity
low
Lowest
Low
Medium
High
Critical
Advisory ID: RHSA-2016:2581-02
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2016:2581.html
Issue date: 2016-11-03
Topic
An update for NetworkManager is now available for Red Hat Enterprise Linux7.Red Hat Product Security has rated this update as having a security impactof Low. A Common Vulnerability Scoring System (CVSS) base score, whichgives a detailed severity rating, is available for each vulnerability fromthe CVE link(s) in the References section.
Relevant Releases Architectures
Red Hat Enterprise Linux Client (v. 7) - x86_64
Red Hat Enterprise Linux Client Optional (v. 7) - noarch, x86_64
Red Hat Enterprise Linux ComputeNode (v. 7) - x86_64
Red Hat Enterprise Linux ComputeNode Optional (v. 7) - noarch, x86_64
Red Hat Enterprise Linux Server (v. 7) - aarch64, ppc64, ppc64le, s390x, x86_64
Red Hat Enterprise Linux Server Optional (v. 7) - aarch64, noarch, ppc64, ppc64le, s390x, x86_64
Red Hat Enterprise Linux Workstation (v. 7) - x86_64
Red Hat Enterprise Linux Workstation Optional (v. 7) - noarch, x86_64
Bugs Fixed
1183420 - Adding bond device to bridge with "bridge-slave" type doesn't work.
1217288 - [enh] Configuration snapshots and rollbacks
1228707 - it would make sense for NM to allow specifying an order for DNS servers1243958 - network-online.target met before IPv6 is up
1255507 - NetworkManager no longer provides complete FQDN (DHCP_HOSTNAME) to dhclient
1257237 - NetworkManager loops and takes CPU until it dies when teamd is unresponsive
1270814 - Setting up team with invalid json config leads to inconsistent state
1271271 - incorrect completion of bluetooth device in nmcli
1271581 - available bluetooth devices should be listed in connection wizard
1277247 - NM crashing when upping libreswan connection as secondary
1278506 - [abrt] NetworkManager: ipv4acd_on_timeout(): NetworkManager killed by SIGABRT
1281301 - NetworkManager infiniband connected mode fails with some adapters1284261 - Default-route doesn't get removed when disconnecting device externally (on lost carrier, unplug cable)
1285367 - nm-libreswan-service abort when trying to establish vpn connection to RH intranet
1286105 - ipv6 address on team.vlan interface disappear sometimes
1289523 - Mobile broadband (WWAN) connection not detected after suspend
1294728 - the team connection becomes incorrect after I restart NetworkManager
1296058 - rebase libnl3 package to new upstream version for rhel-7.3
1298732 - regression: Fails to connect to Red Hat VPN
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!