Stay Connected:

ELSA-2016-2581

ELSA-2016-2581 - NetworkManager security, bug fix, and enhancement update

Type:SECURITY
Severity:LOW
Release Date:2016-11-09

Description


NetworkManager
[1:1.4.0-12]
- device: consider a device with slaves configured (rh#1333983)

[1:1.4.0-11]
- build: add RPM dependency for exact glib2 version (rh#1378809)

[1:1.4.0-10]
- device: improve connection matching for assuming bond and infiniband (rh#1375558)

[1:1.4.0-9]
- clients: handle secret requests only for current connection (rh#1351272)
- device: fix crash reapplying connection to slave devices (rh#1376784)
- cli: fix autocompletion after ifname (rh#1375933)

[1:1.4.0-8]
- libnm: fix crash in nm_vpn_plugin_info_list_get_service_types() (rh#1374526)
- device: wait for MAC address change before setting up interface (rh#1371623, rh#1374023)

[1:1.4.0-7]
- wifi: another fix activation failure due to error changing MAC address (rh#1371623, rh#1374023)
- dhcp: fix race condition that may cause lost lease events and DHCP timeouts (rh#1373276)

[1:1.4.0-6]
- po: add translations (rh#1276476)

[1:1.4.0-5]
- libnm,nmtui: fix handling empty cloned-mac-address property (rh#1372799)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1371201)

[1:1.4.0-4]
- core: really fix wrong source interface for PropertiesChanged D-Bus signal (rh#1371920)

[1:1.4.0-3]
- wifi: fix activation failure due to error changing MAC address (rh#1371623)
- core: fix wrong source interface for PropertiesChanged D-Bus signal (rh#1371920)
- team: restore validation of JSON configuration (rh#1371967)
- device: manage firewall zone for assumed persistent connections (rh#1366288)
- device: don't let external changes cause a release of the slave (rh#1357738)

[1:1.4.0-2]
- ifcfg-rh: clear IP settings for slave connections (rh#1368761)
- ifcfg-rh: accept TEAM connections also without DEVICETYPE setting (rh#1367180)

[1:1.4.0-1]
- Update to 1.4.0 release
- cli: show username when interactively connecting to a wireless network (rh #1351272)
- ifcfg-rh: ensure master is cleared when updating a connection (rh #1355656)
- policy: always try to update kernel hostname (rh #1362542)
- cli: return sane error message for D-Bus policy permission errors (rh #1362542)
- device: don't flush addresses when unmanaging assumed devices (rh #1364393)
- team: be more tolerant when handling invalid or empty configuration (rh #1366300)
- act-request: queue failing the slave when master fails (rh #1367702)
- vpn: fix ipv6 configuration of VPNs without a separate interface (rh #1368354)
- vpn: properly discard routes with invalid prefix length (rh #1368355)

[1:1.4.0-0.6.beta1]
- logging: default to syslog (rh #1358335)

[1:1.4.0-0.5.beta1]
- Update to 1.4-beta1 release
- core: fix setting hostname from DHCP (rh #1356015)
- vlan: honor the REORDER_HDR flag (rh #1312281)
- device: apply MTU setting also to devices without IPv4 configuration (rh #1364275)
- bond: improved connection matching (rh #1304641)
- team: check return value of g_dbus_connection_call_sync() (rh #1349749)

[1:1.4.0-0.4.git20160727.9446481f]
- Rebuild for fixed documentation directory in redhat-rpm-macros

[1:1.4.0-0.3.git20160727.9446481f]
- Update to a more recent 1.4.0 snapshot:
- bond: fix defaults and be more liberal in accepting different formats of option values (rh #1352131)
- bond: fix setting of 'lp_interval' option (rh #1348573)
- device: don't try to generate ipv6ll address for disconnected devices (rh #1351633)
- device: make sure we update system hostname when DHCP configuration changes (rh #1356015)
- device: tune down warning about failure to set userspace IPv6LL on non-existing device (rh #1323571)
- nmcli: add 'nmcli device modify' subcommand to do runtime configuration changes (rh #998000)
- nmcli: crash on connection delete/down timeout (rh 355740)
- nmcli: fix 8021x settings tab-completion (rh #1301226)
- secrets: increase timeout for getting the secrets from the agent (rh #1349740)
- team: keep device config property up to date with actual configuration (rh #1310435)
- team: make synchronization with teamd more robust (rh #1257237)
- vpn: don't merge DNS properties into parent device's configuration (rh #1348901)

[1:1.4.0-0.3.git20160621.072358da]
- Do not regenerate gtk-doc. Together with parallel make it may cause multilib conflicts

[1:1.4.0-0.2.git20160621.072358da]
- enable JSON validation configure option
- Update to a more recent 1.3.0 snapshot:
- team: check return value of g_dbus_connection_call_sync() (rh #1347015)

[1:1.4.0-0.1.git20160606.b769b4df]
- Update to a 1.3.0 snapshot:
- cli: hide secret certificate blobs unless --show-secrets set (rh #1184530)
- dns: add support for specifying dns priorities (rh #1228707)
- core: wait for IPv6 DAD before completing activation (rh #1243958)
- device: take care of default route of DHCP generated-assumed connections (rh #1265239)
- team: improve matching of team connection upon service restart (rh #1294728)
- device: apply MTU setting also to devices without IPv4 configuration (rh #1303968)
- device: reconfigure IP addressing after bringing up device (rh #1309899)
- team: expose current device configuration through D-Bus and nmcli (rh #1310435)
- systemd: add 'After=dbus.service' to NetworkManager.service (rh #1311988)
- cli: handle device failure when activating (rh #1312726)
- core,libnm: remove gateway from connection if never-default is set (rh #1313091)
- platform: remove padding for IP address lifetimes (rh #1318945)
- manager: run dispatcher scripts on suspend/sleep (rh #1330694)
- device: remove pending dhcp actions also in IP_DONE state (rh #1330893)
- wwan: fixed multiple crashes (rh #1331395)
- nmcli: fix tab completion for libreswan import (rh #1337300)

[1:1.2.0-2]
- write /etc/resolv.conf as file by default instead of symlink (rh#1337222)
- rename package config-routing-rules to dispatcher-routing-rules (rh #1334876)

[1:1.2.0-1]
- Update to NetworkManager 1.2.0 release
- vlan: keep the hardware address synchronized with parent device (rh #1325752)
- bond: add more options (rh #1299103)

[1:1.2.0-0.1.beta3]
- Update to a more recent 1.2.0 snapshot

[1:1.2.0-0.1.beta2]
- Update to a 1.2.0 snapshot:
- core: add a connection defaults section to NetworkManager.conf (rh #1164677)
- dhcp: make timeout configurable (rh #1262922)
- pppoe: set the firewall zone on the correct ip interface (rh #1110465)
- device: properly roll back the device activation attempt on failure (rh #1270814)
- nmcli: add monitor command (rh #1034158)
- nmcli: fix shell completion of bluetooth device names (rh #1271271)
- ipv4: add an option to send full FQDN in DHCP requests (rh #1255507)
- core: fix a use-after-free() when activating a secondary VPN connection (rh #1277247)
- wifi: fix bssid cache updating (rh #1094298)
- vlan: honor the reorder-header flag (rh #1250225)
- ipv4: do a duplicate address detection (rh #1259063)
- core: add LLDP listener to the daemon and utilities (rh #1142898)
- vpn: don't fail activation when plugin supports interactive mode, but the VPN daemon does not (rh #1298732)
- ipv6: readd the address when the MAC address changes (rh #1286105)
- core: avoid generating excessively long names for virtual devices (rh #1300755)
- nmcli: add connection import and export (rh #1034105)
- vlan: fix matching of connections on assumption (rh #1276343)
- core: fix matching of static route metrics on connection assumption (rh #1302532)
- core: work around broken device drivers (AWS ENI) that initially have zero MAC address (rh #1288110)
- infiniband: set the link down when changing mode, some drivers need that (rh #1281301)
- infiniband: retry autoactivation of partitions when parent device changes (rh #1275875)


libnl3
[3.2.28-2]
- route: fix nl_object_identical() comparing AF_INET addresses (rh #1370503)

[3.2.28-1]
- update to latest upstream release 3.2.28 (rh #1296058)

[3.2.28-0.1]
- update to latest upstream release 3.2.28-rc1 (rh #1296058)

[3.2.27-1]
- rebase package to upstream version 3.2.27 (rh #1296058)

network-manager-applet
[1.4.0-2]
- c-e: fix team page with older GTK and jansson (rh #1079465)

[1.4.0-1]
- Update to network-manager-applet 1.4.0 release
- c-e: add editor for teaming devices (rh #1079465)

[1.2.2-2]
- c-e: fix tab stop for Create button (rh#1339565)

[1.2.2-1]
- Update to network-manager-applet 1.2.2 release

[1.2.0-1]
- Update to network-manager-applet 1.2.0 release

[1.2.0-0.1.beta3]
- Rebase to 1.2-beta3


Related CVEs


CVE-2016-0764

Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By Advisory
Oracle Linux 7 (x86_64) NetworkManager-1.4.0-12.el7.src.rpm8bdc62de1b1421478160b95ec222fc1aELBA-2020-5025
NetworkManager-libreswan-1.2.4-1.el7.src.rpmd75f4ae5dad82389d1d11d12d56bda94ELSA-2017-2299
libnl3-3.2.28-2.el7.src.rpm815d7743af9c22181fdbfd5454eff781ELSA-2017-2299
network-manager-applet-1.4.0-2.el7.src.rpm65e5ace5e756d74c9dd19130c91af174ELBA-2018-0778
NetworkManager-1.4.0-12.el7.x86_64.rpmc08b69b69a9b353b2c240251e75ba0edELBA-2020-5025
NetworkManager-adsl-1.4.0-12.el7.x86_64.rpm9c51b5afce2d73ac67b071d6432a1a58ELBA-2020-5025
NetworkManager-bluetooth-1.4.0-12.el7.x86_64.rpm4c158ab11b07b55abc3d631b0cbdbec0ELBA-2020-5025
NetworkManager-config-server-1.4.0-12.el7.x86_64.rpm0d3d342ec23a5294b0fa0a0f89994eb8ELBA-2020-5025
NetworkManager-dispatcher-routing-rules-1.4.0-12.el7.noarch.rpm8f0d3bded8399587076c9e39a8153512ELBA-2020-5025
NetworkManager-glib-1.4.0-12.el7.i686.rpmf01cffdf4709c302cf56b49fdc06cb2eELBA-2020-5025
NetworkManager-glib-1.4.0-12.el7.x86_64.rpm5bfa4ff05b61ebf68ea1a4e87e5e4d9cELBA-2020-5025
NetworkManager-glib-devel-1.4.0-12.el7.i686.rpmef36ccd70abdf80ab4ab9b67305925f4ELBA-2020-5025
NetworkManager-glib-devel-1.4.0-12.el7.x86_64.rpmf85ad5632d45aee22936b4338e0d05b1ELBA-2020-5025
NetworkManager-libnm-1.4.0-12.el7.i686.rpme239c19bbdf7239e49888339b05b4134ELBA-2020-5025
NetworkManager-libnm-1.4.0-12.el7.x86_64.rpm047b4e24a6f609c711ac582bd657cb31ELBA-2020-5025
NetworkManager-libnm-devel-1.4.0-12.el7.i686.rpmd9642466bca77848a6ae178d4ecb8bf4ELBA-2020-5025
NetworkManager-libnm-devel-1.4.0-12.el7.x86_64.rpmcafc5fbd48c9304aed8e2b1171def545ELBA-2020-5025
NetworkManager-libreswan-1.2.4-1.el7.x86_64.rpm5b122977853831fc9a8dfc08c8a07e45ELSA-2017-2299
NetworkManager-libreswan-gnome-1.2.4-1.el7.x86_64.rpmb2b065c3924feb8840fce72e6393ca33ELSA-2017-2299
NetworkManager-team-1.4.0-12.el7.x86_64.rpm5ce30c086850d16df54c85ff3d10d383ELBA-2020-5025
NetworkManager-tui-1.4.0-12.el7.x86_64.rpmd1864ee6e4a8c262f2853d92b8d43e3fELBA-2020-5025
NetworkManager-wifi-1.4.0-12.el7.x86_64.rpm70c5020b8ed5fe7b4f862761bb39094fELBA-2020-5025
NetworkManager-wwan-1.4.0-12.el7.x86_64.rpm8c51864b8c94ed5080137a909557cd6aELBA-2020-5025
libnl3-3.2.28-2.el7.i686.rpmeb62d2c97eebf7cac2bb01011a8247c1ELSA-2017-2299
libnl3-3.2.28-2.el7.x86_64.rpm1ff4712172094c71508f215f59bfd678ELSA-2017-2299
libnl3-cli-3.2.28-2.el7.i686.rpm0394666f2bd0f78945c1a55117bf8ee9ELSA-2017-2299
libnl3-cli-3.2.28-2.el7.x86_64.rpmb8b0494d97b6ef43db718d171a8b90d9ELSA-2017-2299
libnl3-devel-3.2.28-2.el7.i686.rpm6a095ffc5e4296cf0dd293bf7f0cb324ELSA-2017-2299
libnl3-devel-3.2.28-2.el7.x86_64.rpm23e00ea83d5180ef7dae095d008f1e7dELSA-2017-2299
libnl3-doc-3.2.28-2.el7.x86_64.rpm66f92fc6ffb6f918aabf2decf0fee5f2ELSA-2017-2299
libnm-gtk-1.4.0-2.el7.i686.rpmce21f786a9ba0ef1ad0197cce7faef62ELBA-2018-0778
libnm-gtk-1.4.0-2.el7.x86_64.rpm8051bbd1c95baf244431f58c306ca5dbELBA-2018-0778
libnm-gtk-devel-1.4.0-2.el7.i686.rpme8b9ed21c9eca398c1e8cca3a4ccfc08ELBA-2018-0778
libnm-gtk-devel-1.4.0-2.el7.x86_64.rpm610667eeb04bc20ae85fdde4c3f517b4ELBA-2018-0778
libnma-1.4.0-2.el7.i686.rpmc87da768e5a95522108ab4b9514e4125ELBA-2018-0778
libnma-1.4.0-2.el7.x86_64.rpm68a1ff71a6cc09f259d551b6633cdbf7ELBA-2018-0778
libnma-devel-1.4.0-2.el7.i686.rpm5fd8bd86e751cb57b5c471d8bf241267ELBA-2018-0778
libnma-devel-1.4.0-2.el7.x86_64.rpmcfead2caa831020c24cff67bbce4deb3ELBA-2018-0778
network-manager-applet-1.4.0-2.el7.x86_64.rpmefe6e4bcb772ff7f5517cd1888f226e4ELBA-2018-0778
nm-connection-editor-1.4.0-2.el7.x86_64.rpm53253dcf4c5735c7f775d68ba2c0295cELBA-2018-0778



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights