RHBA-2014:0726 - Bug Fix Advisory

Topic

Updated NetworkManager packages that fix several bugs are now available for Red
Hat Enterprise Linux 7.

Description

NetworkManager is a system service that manages network interfaces and
connections based on user or automatic configuration. It supports Ethernet,
bridge, bond, VLAN, team, Infiniband, Wi-Fi, mobile broadband (WWAN), PPPoE, and
other devices, and supports a variety of different VPN services.

This update fixes the following bugs:

• If a connection had enabled both IPv4 and IPv6, the NetworkManager-wait-online

service allowed a startup to proceed even though the connectivity was
established only for one of the IP protocols. As a consequence, other network
services which expected connectivity for the other IP protocol could fail. With
this update, NetworkManager-wait-online waits for both IPv4 and IPv6
connectivity to be established before proceeding with activation of the network
interface in this case. (BZ#1096063)

• When taking over existing connections, NetworkManager did not match IPv6

routes correctly. This could result in duplicate network configuration profiles
being created after NetworkManager was restarted. With this update,
NetworkManager handles IPv6 routes correctly and thus no longer duplicates
network configuration profiles when it is restarted. (BZ#1096776)

• The nmcli command-line utility was not able to create VPN connections with

Libreswan. This update adds support for the libreswan, ssh, and l2tp VPN types
to nmcli so that nmcli is now able to create relevant VPN connection profiles.
(BZ#1102051)

• Previously, NetworkManager did not correctly match and generate connections on

IBM S/390 machines. This caused NetworkManager to create duplicate network
configuration profiles after it was restarted. This update ensures that
NetworkManager handles connections on IBM S/390 machines as expected.
(BZ#1102052)

• When restarted, NetworkManager could activate incorrect network configuration

profile because it selected the profile with the oldest time stamp. With this
update, NetworkManager correctly activates the most recently used network
configuration profile after it is restarted. (BZ#1102764)

• Due to a bug in the text user interface for NetworkManager, nmtui, the nmtui

client could terminate unexpectedly with a segmentation fault when adding or
editing IPv6 addresses or routes. This updates fixes this problem and ensures
that nmtui no longer crashes under these circumstances. In addition, nmtui now
handles cloned MAC addresses as expected. (BZ#1103802)

• Due to a race condition, NetworkManager could set an incorrect firewall zone

for an active connection. As a consequence, the respective network interface was
assigned to the wrong firewall zone and the firewall command failed with a
ZONE_CONFLICT error. This update applies a series of patches ensuring that
NetworkManager assigns an active network interface to the correct firewall zone
without any problems. (BZ#1104728)

Users of NetworkManager are advised to upgrade to these updated packages, which
fix these bugs.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/site/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.5 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.3 x86_64
• Red Hat Enterprise Linux Server - AUS 7.4 x86_64
• Red Hat Enterprise Linux Server - AUS 7.3 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux for IBM z Systems 7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.6 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.5 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.4 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.3 s390x
• Red Hat Enterprise Linux for Power, big endian 7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.6 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.5 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.4 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.3 ppc64
• Red Hat Enterprise Linux for Scientific Computing 7 x86_64
• Red Hat Enterprise Linux Server from RHUI 7 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.7 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.6 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.5 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.4 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.3 x86_64
• Red Hat Enterprise Linux Server - AUS 7.7 x86_64
• Red Hat Enterprise Linux Server - AUS 7.6 x86_64
• Red Hat Enterprise Linux Server - TUS 7.7 x86_64
• Red Hat Enterprise Linux Server - TUS 7.6 x86_64
• Red Hat Enterprise Linux Server - TUS 7.3 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.3 x86_64

Fixes

• BZ - 1102051 - nmcli cannot recognize libreswan vpn type
• BZ - 1102052 - There is an issue in matching/generating connections with s390 stuff in NetworkManager [rhel-7.0.z]
• BZ - 1104728 - race condition in setting firewall zone for active connection

CVEs

(none)

References

(none)