Skip to content
OpenAdvisories
Medium ELSA-2017-2299 1 CVE

Moderate: NetworkManager and libnl3 security, bug fix and enhancement update (Oracle Linux 7)

Published Aug 7, 2017 · Updated Aug 7, 2017

Summary

NetworkManager
[1:1.8.0-9]
- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)

[1:1.8.0-8]
- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)

[1:1.8.0-7]
- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)

[1:1.8.0-6]
- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)

[1:1.8.0-5]
- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)

[1:1.8.0-4]
- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)

[1:1.8.0-3]
- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)

[1:1.8.0-2]
- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)

[1:1.8.0-1]
- Update to upstream release 1.8.0
- device: support dummy devices (rh#1398932)
- core: support attaching user-data to connection profiles (rh#1421429)
- core: fix allowing FQDN in dhcp-hostname setting (rh#1443437)
- core: fix configuring firewall while device is activating (rh#1445242)
- core: don't block activation without carrier for IPv6 DAD (rh#1446367)
- tui: force writing master key to ifcfg file when editing connection (rh#1425409)

[1:1.8.0-0.4.rc3]
- Update to third Release Candidate of NetworkManager 1.8
- device: fix regressions in assuming devices on carryover from initrd (rh #1443878)
- device: add support for SRIOV num_vfs (rh #1398934)
- device: leave device up when setting it as unmanaged by user (rh #1371433)
- core: properly track manager, route manager and default route manager references (rh #1440089)
- route: properly deal with routes with non-empty host parts (rh #1439376)
- vpn: fix a crash on disconnect (rh #1442064)
- cli: fix hang on connection down (rh #1422786)
- cli: fix interactive edit of bond slaves (rh #1440957)
- vpn: fix early error handling on failed activations (rh #1440077)
- core: only persist explicit managed state in device's state file (rh #1440171)

[1:1.8.0-0.4.rc2]
- Update to second Release Candidate of NetworkManager 1.8
- device: don't update disconnected devices routes after connectivity check (rh #1436978)
- ifcfg-rh: also check BONDING_OPTS to determine the connection type (rh #1434555)
- nmcli: fix nmcli con edit crash (rh #1436993)
- nmcli: fix nmcli con down (rh #1436990)

[1:1.8.0-0.4.rc1]
- Update to first Release Candidate of NetworkManager 1.8
- nmcli: speedup with large numbers of VLANs (rh #1231526)
- dns: avoid cleaning resolv.conf on exit if not needed (rh #1344303, rh #1426748)
- device: bond: implement connection reapply (rh #1348198)
- platform: add support for some route options (rh #1373698)
- core: add mtu property to cdma and gsm settings (rh #1388613)
- nmcli: fix output in terse mode (rh #1391170)
- improve handling of unmanaged/assumed devices (rh #1394579)
- policy: make DHCP hostname behaviour configurable (rh #1405275)
- manager: ensure proper disposal of unrealized devices (rh #1433303)
- nmcli: fix connection down (rh #1433883)
- libnm-glib: fix memory leak (rh #1433912)
- device: deal with non-existing IP settings in get_ip_config_may_fail() (rh #1436601)
- nmcli: make --ask and --show-secrets global options (rh #1351263)
- nmcli: improve error handling (rh #1394334)
- device: apply a loose IPv4 rp_filter when it would interfere with multihoming (rh #1394344)
- core: make connectivity checking per-device (rh #1394345)
- manager: sort slaves to be autoconnected by device name (rh #1420708)
- policy: add support to configurable hostname mode (rh #1422610)
- team: support the ethernet.cloned-mac-address property (rh #1424641)
- ifcfg-rh: fix reading team slave types of vlan type (rh #1427482)
- default-route-manager: alyways force a sync of the default route (rh #1431268)
- device: fail DHCPv6 if a link-local address is not present (rh #1432251)

[1:1.8.0-0.3.git20170215.1d40c5f4]
- Revert default behavior for clone-mac-address to permanent (rh #1413312)

[1:1.8.0-0.2.git20170215.1d40c5f4]
- Update to a 1.7.1 snapshot:
- rebase NetworkManger package to new upstream 1.8.x version (rh #1414103)
- device: introduce support to ipv6.method=shared (rh #1256822)
- device: add support to vlan on virtual devices (rh #1312359)
- core/supplicant: introduce support to MACsec connections (rh #1337997)
- core: allow enforcing of 802-3 link properties (rh #1353612)
- manager: allow a slave connection which has slaves to autoactivate them (rh #1360386)
- cli: check the active-connection state to detect activation failure (rh #1367752, rh #1384937)
- cli: remove the separate thread when in editor mode to fix races (rh #1368353)
- ifcfg-rh: write the master device name even if the master property is an UU

Fixed packages 26

ReleasePackageFixed in
Oracle Linux · 7 libnl3 0:3.2.28-4.el7
Oracle Linux · 7 libnl3-cli 0:3.2.28-4.el7
Oracle Linux · 7 libnl3-devel 0:3.2.28-4.el7
Oracle Linux · 7 libnl3-doc 0:3.2.28-4.el7
Oracle Linux · 7 libnm-gtk 0:1.8.0-3.el7
Oracle Linux · 7 libnm-gtk-devel 0:1.8.0-3.el7
Oracle Linux · 7 libnma 0:1.8.0-3.el7
Oracle Linux · 7 libnma-devel 0:1.8.0-3.el7
Oracle Linux · 7 network-manager-applet 0:1.8.0-3.el7
Oracle Linux · 7 NetworkManager 1:1.8.0-9.el7
Oracle Linux · 7 NetworkManager-adsl 1:1.8.0-9.el7
Oracle Linux · 7 NetworkManager-bluetooth 1:1.8.0-9.el7
Oracle Linux · 7 NetworkManager-config-server 1:1.8.0-9.el7
Oracle Linux · 7 NetworkManager-dispatcher-routing-rules 1:1.8.0-9.el7
Oracle Linux · 7 NetworkManager-glib 1:1.8.0-9.el7
Oracle Linux · 7 NetworkManager-glib-devel 1:1.8.0-9.el7
Oracle Linux · 7 NetworkManager-libnm 1:1.8.0-9.el7
Oracle Linux · 7 NetworkManager-libnm-devel 1:1.8.0-9.el7
Oracle Linux · 7 NetworkManager-libreswan 0:1.2.4-2.el7
Oracle Linux · 7 NetworkManager-libreswan-gnome 0:1.2.4-2.el7
Oracle Linux · 7 NetworkManager-ppp 1:1.8.0-9.el7
Oracle Linux · 7 NetworkManager-team 1:1.8.0-9.el7
Oracle Linux · 7 NetworkManager-tui 1:1.8.0-9.el7
Oracle Linux · 7 NetworkManager-wifi 1:1.8.0-9.el7
Oracle Linux · 7 NetworkManager-wwan 1:1.8.0-9.el7
Oracle Linux · 7 nm-connection-editor 0:1.8.0-3.el7

Vulnerabilities 1