Skip to content
OpenAdvisories
Low ELSA-2024-9317 1 CVE

Low: NetworkManager security update (Oracle Linux 9)

Published Nov 14, 2024 · Updated Nov 14, 2024

Summary

[1.48.10-2.0.1]
- disable MPTCP handling by default [Orabug: 34801142]
- add connectivity check via Oracle servers [Orabug: 32051972]

[1:1.48.10-2]
- cloud-setup: Allow bigger restart bursts (RHEL-56740)
- cloud-setup: Fix Azure swap of primary and secondary IP addresses (RHEL-56387)

[1:1.48.10-1]
- Unblock the autoconnect for children when parent is available (RHEL-46904)
- Fix crash produced by malformed LLDP package when debug logging (RHEL-46199)
- Support reapplying bridge-port VLANs (RHEL-26750)
- Add small backoff time before resync (RHEL-29902)

[1:1.46.8-1]
- Stop writing offensive terms into keyfiles (RHEL-52597)
- Remove offensive words (RHEL-33368)
- Fix cloned-mac-address race condition with DHCP on ovs-interfaces (RHEL-49796)

[1:1.48.6-1]
- Wait until link is ready before activating for ovs-interface (RHEL-49796)
- Fix rollback on OVS checkpoint (RHEL-31972)
- Assert that the auto-activate list is empty on dispose (RHEL-44345)

[1:1.48.4-1]
- Update to 1.48.4 release
- Support matching a OVS system interface by MAC address (RHEL-34617)
- When looking up the system hostname from the reverse DNS lookup of
addresses configured on interfaces, NetworkManager now takes into
account the content of /etc/hosts (RHEL-33435)

[1:1.48.2-2]
- Add ipcalc as dependency of NetworkManager-dispatcher-routing-rules (RHEL-36648)

[1:1.48.2-1]
- Update to 1.48.2 release
- Save connection timestamps when shutting down (RHEL-35539)
- Fix regression with OpenVPN dynamic challenge (RHEL-43720)

[1:1.48.0-1]
- Upgrade to 1.48.0 release

[1:1.47.91-1]
- Upgrade to 1.47.91 (rc2)

[1:1.47.90-1]
- Upgrade to 1.47.90 (rc1)

[1:1.47.5-1]
- Fix a crash during shutdown (RHEL-29856)

[1:1.47.4-1]
- Fix LLDP support for interfaces attached to OVS bridges. (RHEL-1418)
- Fix NMCI crashes on ovs_mtu and bond tests. (RHEL-30348)

[1.47.3-2]
- Rebuild for CI gating

[1.47.3-1]
- Upgrade to 1.47.3 release (development)
- Support rollback on global DNS (RHEL-23446)
- Support VLAN over OVS interface which holds the same name as OVS bridge (RHEL-26753)

* Fri Mar 08 2024 Inigo Huguet <ihuguet@redhat.com>
- Update to 1.47.2 release (development)
- Support sending DHCPRELEASE (RHEL-17310)

* Thu Feb 22 2024 Stanislas FAYE <sfaye@redhat.com>
- Update to 1.46.0 release
- Fix DHCPv4 lease can't be renewed after it expires (RHEL-24127)
- Support the MACsec offload mode (RHEL-24337)
- Support creating generic devices via external 'device-handler' dispatcher (RHEL-1567)
- Support changing the eswitch mode (RHEL-1441)

[1.45.91-1]
- Update to 1.45.91 release (release candidate)
- Support changing the DSCP header field for DHCP packets, and set the default to CS0 (RHEL-16040)
- Deprecate connection.autoconnect-slaves in favour of autoconnect-ports (RHEL-17621)
- Don't reset bridge's PVID in reapply if it didn't change (RHEL-21576)

[1.45.90-1]
- Update to 1.45.90 release (release candidate)
- Deprecate and Replace connection.slave-type in libnm-core and libnm (RHEL-17620)
- [RFE] Support assigning IPv4 static route to interface without IPv4 address (RHEL-5098)

[1.45.10-1]
- Update to 1.45.10 (development)
- Deprecate and Replace connection.master in libnm-core and libnm (RHEL-17619)

[1.45.9-1]
- Update to 1.45.9 (development)
- Add support for PRP/HSR interface (RHEL-5852)
- Drop support for the 'slaves-order' option in NetworkManager.conf (RHEL-19437)
- Return error when setting invalid IP addresses or properties via D-Bus (RHEL-19315)
- Fix extra route being created besides ECMP route (RHEL-1682)

[1.45.8-1]
- Update to 1.45.8 (development)
- Introduce 'stable-ssid' option for wifi.cloned-mac-address property (RHEL-16470)

[1.45.7-1]
- Update to 1.45.7 release (development)
- Migrate to SPDX license

[1.45.6-1]
- Update to 1.45.6 release (development)
- Fix ovs activation with netdev datapath and cloned MAC (RHEL-5886)

[1.45.5-1]
- Update to 1.45.5 release (development)
- Various fixes to Duplicate Address Detection (DAD) (RHEL-1581, RHEL-1411)
- New option to avoid sending the DHCPv4 client-identifier (RHEL-1469)
- Support setting channels in ethtool options (RHEL-1471)

[1.45.4-1]
- Update to 1.45.4 release (development)
- Add 'dns-change' dispatcher event (RHEL-1671)

[1.45.3-1]
- Update to 1.45.3 release (development)
- Improve explanation of the format and routes properties in keyfile man page (RHEL-1407)
- Improve nm-settings-nmcli manpage to show format and valid values of properties (RHEL-2465)
- Honor the autoactivate priority for port connections (RHEL-2202)
- Properly document valid values for ip-tunnel properties (RHEL-1459)

[1.45.2-1]
- update to 1.45.2 release (development)

[1.44.0-4]
- Rebuild for RHEL 9.4

[1:1.44.0-3]
- checkpoint: Fix segfault crash when rollback (rhel-1526)

[1:1.44.0-2]
- manager: ensure device is exported on D-Bus in authentication request (rh #2210271)

[1:1.44.0-1]
- update to 1.44.0 release
- nmcli: add nmcli version mismatch warning (rh #2173196)
- checkpoint: preserve devices that were removed and readded (rh #2177590)

[1:1.43.90-1]
- update to 1.43.90 release (release candidate)
- manager: allow controller activation if device is deactivating (rh #2125615)
- assume: change IPv6 method from 'ignore' and 'disabled' into 'auto' for loopback device (rh #2207878)
- device: delete software device when lose carrier and is controller (rh #2224479)
- core: better handle ignore-carrier=no for bond/bridge/team devices (rh #2180363)

[1:1.43.11-1]
- update to 1.43.11 release (development)
- fix assertion about missing ifindex when resetting MAC (rh #2215022)
- fix wrong order of entries in resolv.conf after reconnect (rh #2218448)
- do not fail activation when SR-IOV VF parameters can't be applied (rh #2210164)
- warn that the ifcfg-rh plugin is deprecated (rh #2190375)

[1:1.43.10-1]
- Update to 1.43.10 release (development)
- fix reading infiniband p-key from ifcfg files (rh #2209974)
- improve autoconnect when selecting controller (rh #2121451)
- fix managing devices after network

Fixed packages 16

ReleasePackageFixed in
Oracle Linux · 9 NetworkManager 1:1.48.10-2.0.1.el9_5
Oracle Linux · 9 NetworkManager-adsl 1:1.48.10-2.0.1.el9_5
Oracle Linux · 9 NetworkManager-bluetooth 1:1.48.10-2.0.1.el9_5
Oracle Linux · 9 NetworkManager-cloud-setup 1:1.48.10-2.0.1.el9_5
Oracle Linux · 9 NetworkManager-config-connectivity-oracle 1:1.48.10-2.0.1.el9_5
Oracle Linux · 9 NetworkManager-config-server 1:1.48.10-2.0.1.el9_5
Oracle Linux · 9 NetworkManager-dispatcher-routing-rules 1:1.48.10-2.0.1.el9_5
Oracle Linux · 9 NetworkManager-initscripts-updown 1:1.48.10-2.0.1.el9_5
Oracle Linux · 9 NetworkManager-libnm 1:1.48.10-2.0.1.el9_5
Oracle Linux · 9 NetworkManager-libnm-devel 1:1.48.10-2.0.1.el9_5
Oracle Linux · 9 NetworkManager-ovs 1:1.48.10-2.0.1.el9_5
Oracle Linux · 9 NetworkManager-ppp 1:1.48.10-2.0.1.el9_5
Oracle Linux · 9 NetworkManager-team 1:1.48.10-2.0.1.el9_5
Oracle Linux · 9 NetworkManager-tui 1:1.48.10-2.0.1.el9_5
Oracle Linux · 9 NetworkManager-wifi 1:1.48.10-2.0.1.el9_5
Oracle Linux · 9 NetworkManager-wwan 1:1.48.10-2.0.1.el9_5

Vulnerabilities 1