ELSA-2017-2299

ELSA-2017-2299 - NetworkManager and libnl3 security, bug fix and enhancement update

Type:SECURITY
Severity:MODERATE
Release Date:2017-08-07

Description


NetworkManager
[1:1.8.0-9]
- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)

[1:1.8.0-8]
- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)

[1:1.8.0-7]
- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)

[1:1.8.0-6]
- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)

[1:1.8.0-5]
- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)

[1:1.8.0-4]
- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)

[1:1.8.0-3]
- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)

[1:1.8.0-2]
- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)

[1:1.8.0-1]
- Update to upstream release 1.8.0
- device: support dummy devices (rh#1398932)
- core: support attaching user-data to connection profiles (rh#1421429)
- core: fix allowing FQDN in dhcp-hostname setting (rh#1443437)
- core: fix configuring firewall while device is activating (rh#1445242)
- core: don't block activation without carrier for IPv6 DAD (rh#1446367)
- tui: force writing master key to ifcfg file when editing connection (rh#1425409)

[1:1.8.0-0.4.rc3]
- Update to third Release Candidate of NetworkManager 1.8
- device: fix regressions in assuming devices on carryover from initrd (rh #1443878)
- device: add support for SRIOV num_vfs (rh #1398934)
- device: leave device up when setting it as unmanaged by user (rh #1371433)
- core: properly track manager, route manager and default route manager references (rh #1440089)
- route: properly deal with routes with non-empty host parts (rh #1439376)
- vpn: fix a crash on disconnect (rh #1442064)
- cli: fix hang on connection down (rh #1422786)
- cli: fix interactive edit of bond slaves (rh #1440957)
- vpn: fix early error handling on failed activations (rh #1440077)
- core: only persist explicit managed state in device's state file (rh #1440171)

[1:1.8.0-0.4.rc2]
- Update to second Release Candidate of NetworkManager 1.8
- device: don't update disconnected devices routes after connectivity check (rh #1436978)
- ifcfg-rh: also check BONDING_OPTS to determine the connection type (rh #1434555)
- nmcli: fix nmcli con edit crash (rh #1436993)
- nmcli: fix nmcli con down (rh #1436990)

[1:1.8.0-0.4.rc1]
- Update to first Release Candidate of NetworkManager 1.8
- nmcli: speedup with large numbers of VLANs (rh #1231526)
- dns: avoid cleaning resolv.conf on exit if not needed (rh #1344303, rh #1426748)
- device: bond: implement connection reapply (rh #1348198)
- platform: add support for some route options (rh #1373698)
- core: add mtu property to cdma and gsm settings (rh #1388613)
- nmcli: fix output in terse mode (rh #1391170)
- improve handling of unmanaged/assumed devices (rh #1394579)
- policy: make DHCP hostname behaviour configurable (rh #1405275)
- manager: ensure proper disposal of unrealized devices (rh #1433303)
- nmcli: fix connection down (rh #1433883)
- libnm-glib: fix memory leak (rh #1433912)
- device: deal with non-existing IP settings in get_ip_config_may_fail() (rh #1436601)
- nmcli: make --ask and --show-secrets global options (rh #1351263)
- nmcli: improve error handling (rh #1394334)
- device: apply a loose IPv4 rp_filter when it would interfere with multihoming (rh #1394344)
- core: make connectivity checking per-device (rh #1394345)
- manager: sort slaves to be autoconnected by device name (rh #1420708)
- policy: add support to configurable hostname mode (rh #1422610)
- team: support the ethernet.cloned-mac-address property (rh #1424641)
- ifcfg-rh: fix reading team slave types of vlan type (rh #1427482)
- default-route-manager: alyways force a sync of the default route (rh #1431268)
- device: fail DHCPv6 if a link-local address is not present (rh #1432251)

[1:1.8.0-0.3.git20170215.1d40c5f4]
- Revert default behavior for clone-mac-address to permanent (rh #1413312)

[1:1.8.0-0.2.git20170215.1d40c5f4]
- Update to a 1.7.1 snapshot:
- rebase NetworkManger package to new upstream 1.8.x version (rh #1414103)
- device: introduce support to ipv6.method=shared (rh #1256822)
- device: add support to vlan on virtual devices (rh #1312359)
- core/supplicant: introduce support to MACsec connections (rh #1337997)
- core: allow enforcing of 802-3 link properties (rh #1353612)
- manager: allow a slave connection which has slaves to autoactivate them (rh #1360386)
- cli: check the active-connection state to detect activation failure (rh #1367752, rh #1384937)
- cli: remove the separate thread when in editor mode to fix races (rh #1368353)
- ifcfg-rh: write the master device name even if the master property is an UUID (rh #1369008)
- ifcfg-rh: higly improved parsing of ifcfg files (rh #1369380)
- checkpoint: improved the checkpoint/rollback functionality (rh #1369716)
- core: core: don't unmanage devices on shutdown (rh #1371126, rh #1378418)
- cli: properly set multiple addresses in questionnaire mode (rh #1380165)
- manager: keep scheduling connectivity check if there is a default active connection (rh #1386106)
- device: allow custom MAC address on bond and bridge interfaces (rh #1386872)
- core: avoid race reading permanent MAC address before udev initialized (rh #1388286)
- ifcfg-rh: fix import of 802.1x connections with empty EAP-TLS identity (rh #1391477)
- libnm-core: remove INFERRABLE flag from dhcp-hostname property (rh #1393997)
- platform: preserve the order when multiple ip addresses are present (rh #1394500)
- device: avoid a crash when both IPv4 and IPv6 configurations fail (rh #1404148)
- dns: export dns state to DBUS (rh #1404594)
- ppp: moved PPP support into a separate package (rh #1404598)
- dns: don't apply DNS configuration coming from non-active devices (rh #1405431)
- vlan: inherit default MTU from parent device (rh #1414186)
- bond: fix crash when reading from sysfs 'NULL' (rh #1420244)
- build: rebuild with correct hardening flags (rh #1420771)
- platform: downgrade warning about failure to detect kernel support to debug (rh #1421019)
- dns: change behavior for 'rc-manager=symlink' to preserve '/etc/resolv.conf' as file (rh #1367551)
- libnm: order the property updates (rh #1417292)

NetworkManager-libreswan
[1.2.4-2]
- po: update Japanese translation (rh #1383163)

libnl3
[3.2.28-4]
* lib: check for integer overflow in nl_reserve() (rh#1440788, rh#1442723)

network-manager-applet
[1.8.0-3]
- editor: fix crash when destroying 802.1x page (rh #1458567)

[1.8.0-2]
- po: update Japanese translation (rh #1379642)

[1.8.0-1]
- Update to 1.8.0 release (rh #1441621)

[1.8.0-0.1.git20170326.f260f8a]
- Update to network-manager-applet 1.8 snapshot
- c-e: add missing mnemonic characters to buttons (rh #1434317)
- c-e: fix handling of devices without permanent MAC address in devices combo box (rh #1380424)


Related CVEs


CVE-2017-0553

Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By Advisory
Oracle Linux 7 (aarch64) NetworkManager-1.8.0-9.el7.src.rpm2362aef0e1adacfd717067dd7d4a41dcELBA-2020-5025
NetworkManager-libreswan-1.2.4-2.el7.src.rpm3aa4199a5c7bd8499691d06b1980135e-
libnl3-3.2.28-4.el7.src.rpm01a8aa491148b434fb63ea712ec01c2c-
network-manager-applet-1.8.0-3.el7.src.rpmcd8fbabd0ca930524a10417a1bc93c5aELBA-2018-0778
NetworkManager-1.8.0-9.el7.aarch64.rpm3d098c502e556f8e45ac3d27e0f72586ELBA-2020-5025
NetworkManager-adsl-1.8.0-9.el7.aarch64.rpm528309a10fdd797db6f3a9935d743bb8ELBA-2020-5025
NetworkManager-bluetooth-1.8.0-9.el7.aarch64.rpm2ea18ac84a46747ba692efd3e97b6f84ELBA-2020-5025
NetworkManager-config-server-1.8.0-9.el7.noarch.rpm7698db0ff2805db3382c1f2109ff077cELBA-2020-5025
NetworkManager-dispatcher-routing-rules-1.8.0-9.el7.noarch.rpmfc8d4390b25b14062f140b6a7bd48c82ELBA-2020-5025
NetworkManager-glib-1.8.0-9.el7.aarch64.rpm212c8d8cc33dd63c9824ec2e6350f6a6ELBA-2020-5025
NetworkManager-glib-devel-1.8.0-9.el7.aarch64.rpmd480438509922fcf9b818959df81b4d9ELBA-2020-5025
NetworkManager-libnm-1.8.0-9.el7.aarch64.rpmb75f1733eee456999a018c5e410dcaa9ELBA-2020-5025
NetworkManager-libnm-devel-1.8.0-9.el7.aarch64.rpm980f863402c1ea63d20b27890f190519ELBA-2020-5025
NetworkManager-libreswan-1.2.4-2.el7.aarch64.rpm87f394cb3703339ee216099951e81e5e-
NetworkManager-libreswan-gnome-1.2.4-2.el7.aarch64.rpm08c0a9f0e87cd817abda16c459d2dc39-
NetworkManager-ppp-1.8.0-9.el7.aarch64.rpmc3687b3c111be17fb2da48a1c572e4fcELBA-2020-5025
NetworkManager-team-1.8.0-9.el7.aarch64.rpmc9cbfec12915e6617de4593b6ab91189ELBA-2020-5025
NetworkManager-tui-1.8.0-9.el7.aarch64.rpm9105007309c278a332a6a7ef7b0aa6ccELBA-2020-5025
NetworkManager-wifi-1.8.0-9.el7.aarch64.rpm5a674c2a75e2b90962e5957226e35ad4ELBA-2020-5025
NetworkManager-wwan-1.8.0-9.el7.aarch64.rpm1a67af8894ae003ae50fd97f17abbf60ELBA-2020-5025
libnl3-3.2.28-4.el7.aarch64.rpmfece8336021a928bf213649f5fd765ed-
libnl3-cli-3.2.28-4.el7.aarch64.rpmc8c98c5ed2ab93cb6b2860a80e38a4e2-
libnl3-devel-3.2.28-4.el7.aarch64.rpm019f6d1093aa30653b9855ffbbb5912e-
libnl3-doc-3.2.28-4.el7.aarch64.rpmac3a69226855ae5679b678aa7bc7fd49-
libnm-gtk-1.8.0-3.el7.aarch64.rpm91f5fdf98b3b94ec56026fa2f38c03d5ELBA-2018-0778
libnm-gtk-devel-1.8.0-3.el7.aarch64.rpm42f643c12f3704a948787982cb5a5279ELBA-2018-0778
libnma-1.8.0-3.el7.aarch64.rpm3bfc3d520b895e7ab26db9277c8d8876ELBA-2018-0778
libnma-devel-1.8.0-3.el7.aarch64.rpm46d58e76543e520ed8aa138080676af8ELBA-2018-0778
network-manager-applet-1.8.0-3.el7.aarch64.rpme5f80f295cef1bc6aa8c1605b72ba6b0ELBA-2018-0778
nm-connection-editor-1.8.0-3.el7.aarch64.rpm02cacfea262c98a7ccb1e1000bc6821cELBA-2018-0778
Oracle Linux 7 (x86_64) NetworkManager-1.8.0-9.el7.src.rpm2362aef0e1adacfd717067dd7d4a41dcELBA-2020-5025
NetworkManager-libreswan-1.2.4-2.el7.src.rpm3aa4199a5c7bd8499691d06b1980135e-
libnl3-3.2.28-4.el7.src.rpm01a8aa491148b434fb63ea712ec01c2c-
network-manager-applet-1.8.0-3.el7.src.rpmcd8fbabd0ca930524a10417a1bc93c5aELBA-2018-0778
NetworkManager-1.8.0-9.el7.x86_64.rpm2086b2683e3969030dabbaf666393aceELBA-2020-5025
NetworkManager-adsl-1.8.0-9.el7.x86_64.rpm5104382766c28ed18ee4413b76b862ccELBA-2020-5025
NetworkManager-bluetooth-1.8.0-9.el7.x86_64.rpm21263af3d6738a789e7b1a474af66825ELBA-2020-5025
NetworkManager-config-server-1.8.0-9.el7.noarch.rpm7698db0ff2805db3382c1f2109ff077cELBA-2020-5025
NetworkManager-dispatcher-routing-rules-1.8.0-9.el7.noarch.rpmfc8d4390b25b14062f140b6a7bd48c82ELBA-2020-5025
NetworkManager-glib-1.8.0-9.el7.i686.rpm5725a4fc2b616800cda3822696f089e4ELBA-2020-5025
NetworkManager-glib-1.8.0-9.el7.x86_64.rpm3958609864fe9ab347edc6de93fff338ELBA-2020-5025
NetworkManager-glib-devel-1.8.0-9.el7.i686.rpm5c8487b141d047ff40b25825acb8bec6ELBA-2020-5025
NetworkManager-glib-devel-1.8.0-9.el7.x86_64.rpmd7c6e96566a8311b08b0161d95343501ELBA-2020-5025
NetworkManager-libnm-1.8.0-9.el7.i686.rpma3afe8d0b5acbc83fcee78bea3f4ce97ELBA-2020-5025
NetworkManager-libnm-1.8.0-9.el7.x86_64.rpmb4f90acd9ee7ea9555ea1de12a3efaadELBA-2020-5025
NetworkManager-libnm-devel-1.8.0-9.el7.i686.rpmcf495c1877bbae4e064d27a5cada35bcELBA-2020-5025
NetworkManager-libnm-devel-1.8.0-9.el7.x86_64.rpmc506754f1b9e7ddd69af2e18d7d5a16fELBA-2020-5025
NetworkManager-libreswan-1.2.4-2.el7.x86_64.rpmcbd547b5804b539ae19902adbd491fa2-
NetworkManager-libreswan-gnome-1.2.4-2.el7.x86_64.rpmef57e48a844e5e3743ed3bc722469faa-
NetworkManager-ppp-1.8.0-9.el7.x86_64.rpma2afc17dce1f10039f022f7053e083f8ELBA-2020-5025
NetworkManager-team-1.8.0-9.el7.x86_64.rpma592896344b73a449d2bb057ecd31611ELBA-2020-5025
NetworkManager-tui-1.8.0-9.el7.x86_64.rpm1a1900b1ad6969d965e2b6cb896c5070ELBA-2020-5025
NetworkManager-wifi-1.8.0-9.el7.x86_64.rpmf580c0dadcfdd2b0ac14fdb7b81dc259ELBA-2020-5025
NetworkManager-wwan-1.8.0-9.el7.x86_64.rpm5823a07a3965c9f9cc87615c799426e6ELBA-2020-5025
libnl3-3.2.28-4.el7.i686.rpm29183eb07a26a66d5931c89890d17ee9-
libnl3-3.2.28-4.el7.x86_64.rpme7e1dc5c1fb20794add54990ad2c47b3-
libnl3-cli-3.2.28-4.el7.i686.rpmdc48c90adb61151dd0ad220531160ad0-
libnl3-cli-3.2.28-4.el7.x86_64.rpmadd9c3907d1f4246cd5eabc45cea503a-
libnl3-devel-3.2.28-4.el7.i686.rpm7225b0d4ad4fa542bf9311586dc03eab-
libnl3-devel-3.2.28-4.el7.x86_64.rpmd3533ce25ebfc7d6a441e5062f55a387-
libnl3-doc-3.2.28-4.el7.x86_64.rpm5e6fa84c9b1d1c50d631530c2004617e-
libnm-gtk-1.8.0-3.el7.i686.rpm771f0e7e023310cee32bf9a139aa67e5ELBA-2018-0778
libnm-gtk-1.8.0-3.el7.x86_64.rpma810559cdea60fc925065af0fc0f8e4bELBA-2018-0778
libnm-gtk-devel-1.8.0-3.el7.i686.rpmcbfecff3d211b3a7d817d552122eea46ELBA-2018-0778
libnm-gtk-devel-1.8.0-3.el7.x86_64.rpmc83b722b5c5616d1d9baf860b789929eELBA-2018-0778
libnma-1.8.0-3.el7.i686.rpm65037309b55fa0003e15d514b50c8a02ELBA-2018-0778
libnma-1.8.0-3.el7.x86_64.rpmb179d3d5f7d4e34d560c7801240a774fELBA-2018-0778
libnma-devel-1.8.0-3.el7.i686.rpmc988e1994cef94be117618644ea57128ELBA-2018-0778
libnma-devel-1.8.0-3.el7.x86_64.rpm4137e30de32e0c651a40e7506022dd84ELBA-2018-0778
network-manager-applet-1.8.0-3.el7.x86_64.rpm5aa49397599fe3c61eae7befc9641c32ELBA-2018-0778
nm-connection-editor-1.8.0-3.el7.x86_64.rpm9dd210c79b30f6d2af44b6ac00a08d2eELBA-2018-0778



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete