RHBA-2011:0757 - Bug Fix Advisory

Topic

Updated iproute packages that fix several bugs and add one enhancement are now
available.

Description

The iproute packages contain networking utilities designed to use the
advanced networking capabilities of the Linux kernel.

These updated packages contain the following bug fixes:

• If the "ip" command was used to create a veth device pair, and the

"peer" parameter was specified but the "name" parameter was not used, a
segmentation fault occurred. The "name" parameter was an unnecessary
requirement for this operation. The need for this parameter has been
removed and the command now works as expected. (BZ#636943)

• The ss man page contained a reference to a nonexistent file. This

reference has been updated with the correct file location. (BZ#641918)

• Previously, attempting to flush a secondary device with "ip secondary"

would fail. This issue has now been corrected and secondary devices are
flushed as expected. (BZ#678986)

These updated packages also provide the following enhancement:

• Support for adding, deleting, and modifying security contexts or

security labels in ipsec policies has been added to the "ip xfrm"
command. (BZ#670295)

All users of iproute are advised to upgrade to these updated packages,
which correct these issues and add this enhancement.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
http://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

• BZ - 636943 - ip segfault creating veth when peer option specified but no name provided
• BZ - 641918 - man ss refers to a non-existent file
• BZ - 678986 - flushing secondary device does not work

CVEs

(none)

References

(none)