Skip to content
OpenAdvisories
Medium ELSA-2015-2248 1 CVE

Moderate: netcf security, bug fix, and enhancement update (Oracle Linux 7)

Published Nov 23, 2015 · Updated Nov 23, 2015

Summary

[0.2.8-1]
- Rebase to netcf-0.2.8
- resolve rhbz#1165965 - CVE-2014-8119
- resolve rhbz#1159000
- support multiple IPv4 addresses in interface config (redhat driver)
- resolve rhbz#1113983
- allow static IPv4 config simultaneous with DHCPv4 (redhat driver)
- resolve rhbz#1170941
- remove extra quotes from IPV6ADDR_SECONDARIES (redhat+suse drivers)
- resolve rhbz#1090011
- limit names of new interfaces to IFNAMSIZ characters
- resolve rhbz#761246
- properly parse ifcfg files with comments past column 1

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 7 netcf 0:0.2.8-1.el7
Oracle Linux · 7 netcf-devel 0:0.2.8-1.el7
Oracle Linux · 7 netcf-libs 0:0.2.8-1.el7

Vulnerabilities 1

  • Unscored —

    The find_ifcfg_path function in netcf before 0.2.7 might allow attackers to cause a denial of service (application cras…