Scientific Linux SL7.x: SLSA-2016:2581-2 Low: NetworkManager Race Condition

Date: Wed, 14 Dec 2016 18:15:10 -0000
Reply-To: scientific-linux-users@
Sender: Security Errata for Scientific Linux
 
From: Scott Reid 
Subject: Security ERRATA Low: NetworkManager on SL7.x x86_64
MIME-Version: 1.0
Message-ID: <20161214181510.15405.38567@slpackages.fnal.gov>

Synopsis: Low: NetworkManager security, bug fix, and enhancement update
Advisory ID: SLSA-2016:2581-2
Issue Date: 2016-11-03
CVE Numbers: CVE-2016-0764
--

The following packages have been upgraded to a newer upstream version:
NetworkManager (1.4.0), NetworkManager-libreswan (1.2.4), network-manager-applet (1.4.0), libnl3 (3.2.28).

Security Fix(es):

* A race condition vulnerability was discovered in NetworkManager.
Temporary files were created insecurely when saving or updating connection
settings, which could allow local users to read connection secrets such as
VPN passwords or WiFi keys. (CVE-2016-0764)

Additional Changes:
--

SL7
 x86_64
 NetworkManager-1.4.0-12.el7.x86_64.rpm
 NetworkManager-adsl-1.4.0-12.el7.x86_64.rpm
 NetworkManager-bluetooth-1.4.0-12.el7.x86_64.rpm
 NetworkManager-debuginfo-1.4.0-12.el7.i686.rpm
 NetworkManager-debuginfo-1.4.0-12.el7.x86_64.rpm
 NetworkManager-glib-1.4.0-12.el7.i686.rpm
 NetworkManager-glib-1.4.0-12.el7.x86_64.rpm
 NetworkManager-libnm-1.4.0-12.el7.i686.rpm
 NetworkManager-libnm-1.4.0-12.el7.x86_64.rpm
 NetworkManager-libreswan-1.2.4-1.el7.x86_64.rpm
 NetworkManager-libreswan-debuginfo-1.2.4-1.el7.x86_64.rpm
 NetworkManager-libreswan-gnome-1.2.4-1.el7.x86_64.rpm
 NetworkManager-team-1.4.0-12.el7.x86_64.rpm
 NetworkManager-tui-1.4.0-12.el7.x86_64.rpm
 NetworkManager-wifi-1.4.0-12.el7.x86_64.rpm
 NetworkManager-wwan-1.4.0-12.el7.x86_64.rpm
 libnl3-3.2.28-2.el7.i686.rpm
 libnl3-3.2.28-2.el7.x86_64.rpm
 libnl3-cli-3.2.28-2.el7.i686.rpm
 libnl3-cli-3.2.28-2.el7.x86_64.rpm
 libnl3-debuginfo-3.2.28-2.el7.i686.rpm
 libnl3-debuginfo-3.2.28-2.el7.x86_64.rpm
 libnm-gtk-1.4.0-2.el7.i686.rpm
 libnm-gtk-1.4.0-2.el7.x86_64.rpm
 libnma-1.4.0-2.el7.i686.rpm
 libnma-1.4.0-2.el7.x86_64.rpm
 network-manager-applet-debuginfo-1.4.0-2.el7.i686.rpm
 network-manager-applet-debuginfo-1.4.0-2.el7.x86_64.rpm
 nm-connection-editor-1.4.0-2.el7.x86_64.rpm
 NetworkManager-config-server-1.4.0-12.el7.x86_64.rpm
 NetworkManager-glib-devel-1.4.0-12.el7.i686.rpm
 NetworkManager-glib-devel-1.4.0-12.el7.x86_64.rpm
 NetworkManager-libnm-devel-1.4.0-12.el7.i686.rpm
 NetworkManager-libnm-devel-1.4.0-12.el7.x86_64.rpm
 libnl3-devel-3.2.28-2.el7.i686.rpm
 libnl3-devel-3.2.28-2.el7.x86_64.rpm
 libnl3-doc-3.2.28-2.el7.x86_64.rpm
 libnm-gtk-devel-1.4.0-2.el7.i686.rpm
 libnm-gtk-devel-1.4.0-2.el7.x86_64.rpm
 libnma-devel-1.4.0-2.el7.i686.rpm
 libnma-devel-1.4.0-2.el7.x86_64.rpm
 network-manager-applet-1.4.0-2.el7.x86_64.rpm
 noarch
 NetworkManager-dispatcher-routing-rules-1.4.0-12.el7.noarch.rpm

- Scientific Linux Development Team