Skip to content
OpenAdvisories
Low ELSA-2016-2581 1 CVE

Low: NetworkManager security, bug fix, and enhancement update (Oracle Linux 7)

Published Nov 9, 2016 · Updated Nov 9, 2016

Summary

NetworkManager
[1:1.4.0-12]
- device: consider a device with slaves configured (rh#1333983)

[1:1.4.0-11]
- build: add RPM dependency for exact glib2 version (rh#1378809)

[1:1.4.0-10]
- device: improve connection matching for assuming bond and infiniband (rh#1375558)

[1:1.4.0-9]
- clients: handle secret requests only for current connection (rh#1351272)
- device: fix crash reapplying connection to slave devices (rh#1376784)
- cli: fix autocompletion after ifname (rh#1375933)

[1:1.4.0-8]
- libnm: fix crash in nm_vpn_plugin_info_list_get_service_types() (rh#1374526)
- device: wait for MAC address change before setting up interface (rh#1371623, rh#1374023)

[1:1.4.0-7]
- wifi: another fix activation failure due to error changing MAC address (rh#1371623, rh#1374023)
- dhcp: fix race condition that may cause lost lease events and DHCP timeouts (rh#1373276)

[1:1.4.0-6]
- po: add translations (rh#1276476)

[1:1.4.0-5]
- libnm,nmtui: fix handling empty cloned-mac-address property (rh#1372799)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1371201)

[1:1.4.0-4]
- core: really fix wrong source interface for PropertiesChanged D-Bus signal (rh#1371920)

[1:1.4.0-3]
- wifi: fix activation failure due to error changing MAC address (rh#1371623)
- core: fix wrong source interface for PropertiesChanged D-Bus signal (rh#1371920)
- team: restore validation of JSON configuration (rh#1371967)
- device: manage firewall zone for assumed persistent connections (rh#1366288)
- device: don't let external changes cause a release of the slave (rh#1357738)

[1:1.4.0-2]
- ifcfg-rh: clear IP settings for slave connections (rh#1368761)
- ifcfg-rh: accept TEAM connections also without DEVICETYPE setting (rh#1367180)

[1:1.4.0-1]
- Update to 1.4.0 release
- cli: show username when interactively connecting to a wireless network (rh #1351272)
- ifcfg-rh: ensure master is cleared when updating a connection (rh #1355656)
- policy: always try to update kernel hostname (rh #1362542)
- cli: return sane error message for D-Bus policy permission errors (rh #1362542)
- device: don't flush addresses when unmanaging assumed devices (rh #1364393)
- team: be more tolerant when handling invalid or empty configuration (rh #1366300)
- act-request: queue failing the slave when master fails (rh #1367702)
- vpn: fix ipv6 configuration of VPNs without a separate interface (rh #1368354)
- vpn: properly discard routes with invalid prefix length (rh #1368355)

[1:1.4.0-0.6.beta1]
- logging: default to syslog (rh #1358335)

[1:1.4.0-0.5.beta1]
- Update to 1.4-beta1 release
- core: fix setting hostname from DHCP (rh #1356015)
- vlan: honor the REORDER_HDR flag (rh #1312281)
- device: apply MTU setting also to devices without IPv4 configuration (rh #1364275)
- bond: improved connection matching (rh #1304641)
- team: check return value of g_dbus_connection_call_sync() (rh #1349749)

[1:1.4.0-0.4.git20160727.9446481f]
- Rebuild for fixed documentation directory in redhat-rpm-macros

[1:1.4.0-0.3.git20160727.9446481f]
- Update to a more recent 1.4.0 snapshot:
- bond: fix defaults and be more liberal in accepting different formats of option values (rh #1352131)
- bond: fix setting of 'lp_interval' option (rh #1348573)
- device: don't try to generate ipv6ll address for disconnected devices (rh #1351633)
- device: make sure we update system hostname when DHCP configuration changes (rh #1356015)
- device: tune down warning about failure to set userspace IPv6LL on non-existing device (rh #1323571)
- nmcli: add 'nmcli device modify' subcommand to do runtime configuration changes (rh #998000)
- nmcli: crash on connection delete/down timeout (rh 355740)
- nmcli: fix 8021x settings tab-completion (rh #1301226)
- secrets: increase timeout for getting the secrets from the agent (rh #1349740)
- team: keep device config property up to date with actual configuration (rh #1310435)
- team: make synchronization with teamd more robust (rh #1257237)
- vpn: don't merge DNS properties into parent device's configuration (rh #1348901)

[1:1.4.0-0.3.git20160621.072358da]
- Do not regenerate gtk-doc. Together with parallel make it may cause multilib conflicts

[1:1.4.0-0.2.git20160621.072358da]
- enable JSON validation configure option
- Update to a more recent 1.3.0 snapshot:
- team: check return value of g_dbus_connection_call_sync() (rh #1347015)

[1:1.4.0-0.1.git20160606.b769b4df]
- Update to a 1.3.0 snapshot:
- cli: hide secret certificate blobs unless --show-secrets set (rh #1184530)
- dns: add support for specifying dns priorities (rh #1228707)
- core: wait for IPv6 DAD before completing activation (rh #1243958)
- device: take care of default route of DHCP generated-assumed connections (rh #1265239)
- team: improve matching of team connection upon service restart (rh #1294728)
- device: apply MTU setting also to devices without IPv4 configuration (rh #1303968)
- device: reconfigure IP addressing after bringing up device (rh #1309899)
- team: expose current device configuration through D-Bus and nmcli (rh #1310435)
- systemd: add 'After=dbus.service' to NetworkManager.service (rh #1311988)
- cli: handle device failure when activating (rh #1312726)
- core,libnm: remove gateway from connection if never-default is set (rh #1313091)
- platform: remove padding for IP address lifetimes (rh #1318945)
- manager: run dispatcher scripts on suspend/sleep (rh #1330694)
- device: remove pending dhcp actions also in IP_DONE state (rh #1330893)
- wwan: fixed multiple crashes (rh #1331395)
- nmcli: fix tab completion for libreswan import (rh #1337300)

[1:1.2.0-2]
- write /etc/resolv.conf as file by default instead of symlink (rh#1337222)
- rename package config-routing-rules to dispatcher-routing-rules (rh #1334876)

[1:1.2.0-1]
- Update to NetworkManager 1.2.0 release
- vlan: keep the hardware address synchronized with parent device (rh #1325752)
- bond: add more options (rh #1299103)

[1:1.2.0-0.1.beta3]
- Update to a more recent 1.2.0 snapshot

[1:1.2.0-0.1.beta2]
- Updat

Fixed packages 25

ReleasePackageFixed in
Oracle Linux · 7 libnl3 0:3.2.28-2.el7
Oracle Linux · 7 libnl3-cli 0:3.2.28-2.el7
Oracle Linux · 7 libnl3-devel 0:3.2.28-2.el7
Oracle Linux · 7 libnl3-doc 0:3.2.28-2.el7
Oracle Linux · 7 libnm-gtk 0:1.4.0-2.el7
Oracle Linux · 7 libnm-gtk-devel 0:1.4.0-2.el7
Oracle Linux · 7 libnma 0:1.4.0-2.el7
Oracle Linux · 7 libnma-devel 0:1.4.0-2.el7
Oracle Linux · 7 network-manager-applet 0:1.4.0-2.el7
Oracle Linux · 7 NetworkManager 1:1.4.0-12.el7
Oracle Linux · 7 NetworkManager-adsl 1:1.4.0-12.el7
Oracle Linux · 7 NetworkManager-bluetooth 1:1.4.0-12.el7
Oracle Linux · 7 NetworkManager-config-server 1:1.4.0-12.el7
Oracle Linux · 7 NetworkManager-dispatcher-routing-rules 1:1.4.0-12.el7
Oracle Linux · 7 NetworkManager-glib 1:1.4.0-12.el7
Oracle Linux · 7 NetworkManager-glib-devel 1:1.4.0-12.el7
Oracle Linux · 7 NetworkManager-libnm 1:1.4.0-12.el7
Oracle Linux · 7 NetworkManager-libnm-devel 1:1.4.0-12.el7
Oracle Linux · 7 NetworkManager-libreswan 0:1.2.4-1.el7
Oracle Linux · 7 NetworkManager-libreswan-gnome 0:1.2.4-1.el7
Oracle Linux · 7 NetworkManager-team 1:1.4.0-12.el7
Oracle Linux · 7 NetworkManager-tui 1:1.4.0-12.el7
Oracle Linux · 7 NetworkManager-wifi 1:1.4.0-12.el7
Oracle Linux · 7 NetworkManager-wwan 1:1.4.0-12.el7
Oracle Linux · 7 nm-connection-editor 0:1.4.0-2.el7

Vulnerabilities 1

  • Unscored —

    Race condition in Network Manager before 1.0.12 as packaged in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise L…