Issued:
2010-02-16
Updated:
2010-02-16

RHSA-2010:0108 - Security Advisory

Synopsis

Moderate: NetworkManager security update

Type/Severity

Security Advisory: Moderate

Topic

Updated NetworkManager packages that fix two security issues are now
available for Red Hat Enterprise Linux 5.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

Description

NetworkManager is a network link manager that attempts to keep a wired or
wireless network connection active at all times.

A missing network certificate verification flaw was found in
NetworkManager. If a user created a WPA Enterprise or 802.1x wireless
network connection that was verified using a Certificate Authority (CA)
certificate, and then later removed that CA certificate file,
NetworkManager failed to verify the identity of the network on the
following connection attempts. In these situations, a malicious wireless
network spoofing the original network could trick a user into disclosing
authentication credentials or communicating over an untrusted network.
(CVE-2009-4144)

An information disclosure flaw was found in NetworkManager's
nm-connection-editor D-Bus interface. If a user edited network connection
options using nm-connection-editor, a summary of those changes was
broadcasted over the D-Bus message bus, possibly disclosing sensitive
information (such as wireless network authentication credentials) to other
local users. (CVE-2009-4145)

Users of NetworkManager should upgrade to these updated packages, which
contain backported patches to correct these issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

  • Red Hat Enterprise Linux Server 5 x86_64
  • Red Hat Enterprise Linux Server 5 ia64
  • Red Hat Enterprise Linux Server 5 i386
  • Red Hat Enterprise Linux Server - Extended Update Support 5.4 x86_64
  • Red Hat Enterprise Linux Server - Extended Update Support 5.4 ia64
  • Red Hat Enterprise Linux Server - Extended Update Support 5.4 i386
  • Red Hat Enterprise Linux Workstation 5 x86_64
  • Red Hat Enterprise Linux Workstation 5 i386
  • Red Hat Enterprise Linux Desktop 5 x86_64
  • Red Hat Enterprise Linux Desktop 5 i386
  • Red Hat Enterprise Linux for Power, big endian 5 ppc
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 5.4 ppc
  • Red Hat Enterprise Linux Server from RHUI 5 x86_64
  • Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

  • BZ - 546117 - CVE-2009-4145 NetworkManager: information disclosure by nm-connection-editor
  • BZ - 546795 - CVE-2009-4144 NetworkManager: WPA enterprise network not verified when certificate is removed

CVEs

References

Red Hat Enterprise Linux Server 5

SRPM
NetworkManager-0.7.0-9.el5_4.src.rpm SHA-256: 04fe1324d106be54416d2f40f5a3c7d4e6328b8714dc51d8f0900b242fef45ac
x86_64
NetworkManager-0.7.0-9.el5_4.i386.rpm SHA-256: 089fa267e878ec04fed85e362c144d74e39fb03b93f6a88f0c54b7254b64b4a1
NetworkManager-0.7.0-9.el5_4.x86_64.rpm SHA-256: 210636c2905abe975ef03c0445736310e9765adf407e01a7e8447535a4df66de
NetworkManager-devel-0.7.0-9.el5_4.i386.rpm SHA-256: 121ba0654b56ec4f81c2a779159aad1fafcd814fa820950b27467d55f8089369
NetworkManager-devel-0.7.0-9.el5_4.x86_64.rpm SHA-256: b07b02bebfcd526c856a26eb244e0ce0a37e7f96e28c9529c24a2486841358ab
NetworkManager-glib-0.7.0-9.el5_4.i386.rpm SHA-256: c165522160bdf5907f26bdc0c0e760f3ea5c38eb9019b68efcb0063c4c72318d
NetworkManager-glib-0.7.0-9.el5_4.x86_64.rpm SHA-256: 6b65fc93f65354d59d7fedb09edfb8d546d26c1484edd7c145cd4e7317810824
NetworkManager-glib-devel-0.7.0-9.el5_4.i386.rpm SHA-256: c93576e55dd9d6a8cf680b067c115df925e50e4c48c45a04b0dfe40536e9db20
NetworkManager-glib-devel-0.7.0-9.el5_4.x86_64.rpm SHA-256: 98e30dcb640508d8e6c7403d1d66a2ce44257251583c03997d442385ff0d33e6
NetworkManager-gnome-0.7.0-9.el5_4.x86_64.rpm SHA-256: 1f5eb8c712971b0eed2f99d99868835804332db0689663dac0132da846ef210b
ia64
NetworkManager-0.7.0-9.el5_4.ia64.rpm SHA-256: 0ae01bc5fd891dff0e64d236e15130ed7dd3d19d94b8d5060492de7fbfa24f77
NetworkManager-devel-0.7.0-9.el5_4.ia64.rpm SHA-256: 26e381cd65b86fd78f46d300eab90d9d0b60de1bf8c43f6a9eea1f57e0bd221a
NetworkManager-glib-0.7.0-9.el5_4.ia64.rpm SHA-256: 01dddf84143d96fd5c321de9a8d91df8aa7cdbb322c3f8b83313cd177a9027d5
NetworkManager-glib-devel-0.7.0-9.el5_4.ia64.rpm SHA-256: b160f92bb7a14d9e36371ff799191421ff5b33c78a0cb0b61735a867d89aebe4
NetworkManager-gnome-0.7.0-9.el5_4.ia64.rpm SHA-256: 3b0c61ce62347094b7b6e41ec8e8d3d09f526b95fc8e21720f637693f333cf37
i386
NetworkManager-0.7.0-9.el5_4.i386.rpm SHA-256: 089fa267e878ec04fed85e362c144d74e39fb03b93f6a88f0c54b7254b64b4a1
NetworkManager-devel-0.7.0-9.el5_4.i386.rpm SHA-256: 121ba0654b56ec4f81c2a779159aad1fafcd814fa820950b27467d55f8089369
NetworkManager-glib-0.7.0-9.el5_4.i386.rpm SHA-256: c165522160bdf5907f26bdc0c0e760f3ea5c38eb9019b68efcb0063c4c72318d
NetworkManager-glib-devel-0.7.0-9.el5_4.i386.rpm SHA-256: c93576e55dd9d6a8cf680b067c115df925e50e4c48c45a04b0dfe40536e9db20
NetworkManager-gnome-0.7.0-9.el5_4.i386.rpm SHA-256: 3786de33f9a2af34f72cbf8ca8d9cf2c749f273fe99df60d2ea50f37ca87584d

Red Hat Enterprise Linux Workstation 5

SRPM
NetworkManager-0.7.0-9.el5_4.src.rpm SHA-256: 04fe1324d106be54416d2f40f5a3c7d4e6328b8714dc51d8f0900b242fef45ac
x86_64
NetworkManager-0.7.0-9.el5_4.i386.rpm SHA-256: 089fa267e878ec04fed85e362c144d74e39fb03b93f6a88f0c54b7254b64b4a1
NetworkManager-0.7.0-9.el5_4.x86_64.rpm SHA-256: 210636c2905abe975ef03c0445736310e9765adf407e01a7e8447535a4df66de
NetworkManager-devel-0.7.0-9.el5_4.i386.rpm SHA-256: 121ba0654b56ec4f81c2a779159aad1fafcd814fa820950b27467d55f8089369
NetworkManager-devel-0.7.0-9.el5_4.x86_64.rpm SHA-256: b07b02bebfcd526c856a26eb244e0ce0a37e7f96e28c9529c24a2486841358ab
NetworkManager-glib-0.7.0-9.el5_4.i386.rpm SHA-256: c165522160bdf5907f26bdc0c0e760f3ea5c38eb9019b68efcb0063c4c72318d
NetworkManager-glib-0.7.0-9.el5_4.x86_64.rpm SHA-256: 6b65fc93f65354d59d7fedb09edfb8d546d26c1484edd7c145cd4e7317810824
NetworkManager-glib-devel-0.7.0-9.el5_4.i386.rpm SHA-256: c93576e55dd9d6a8cf680b067c115df925e50e4c48c45a04b0dfe40536e9db20
NetworkManager-glib-devel-0.7.0-9.el5_4.x86_64.rpm SHA-256: 98e30dcb640508d8e6c7403d1d66a2ce44257251583c03997d442385ff0d33e6
NetworkManager-gnome-0.7.0-9.el5_4.x86_64.rpm SHA-256: 1f5eb8c712971b0eed2f99d99868835804332db0689663dac0132da846ef210b
i386
NetworkManager-0.7.0-9.el5_4.i386.rpm SHA-256: 089fa267e878ec04fed85e362c144d74e39fb03b93f6a88f0c54b7254b64b4a1
NetworkManager-devel-0.7.0-9.el5_4.i386.rpm SHA-256: 121ba0654b56ec4f81c2a779159aad1fafcd814fa820950b27467d55f8089369
NetworkManager-glib-0.7.0-9.el5_4.i386.rpm SHA-256: c165522160bdf5907f26bdc0c0e760f3ea5c38eb9019b68efcb0063c4c72318d
NetworkManager-glib-devel-0.7.0-9.el5_4.i386.rpm SHA-256: c93576e55dd9d6a8cf680b067c115df925e50e4c48c45a04b0dfe40536e9db20
NetworkManager-gnome-0.7.0-9.el5_4.i386.rpm SHA-256: 3786de33f9a2af34f72cbf8ca8d9cf2c749f273fe99df60d2ea50f37ca87584d

Red Hat Enterprise Linux Desktop 5

SRPM
NetworkManager-0.7.0-9.el5_4.src.rpm SHA-256: 04fe1324d106be54416d2f40f5a3c7d4e6328b8714dc51d8f0900b242fef45ac
x86_64
NetworkManager-0.7.0-9.el5_4.i386.rpm SHA-256: 089fa267e878ec04fed85e362c144d74e39fb03b93f6a88f0c54b7254b64b4a1
NetworkManager-0.7.0-9.el5_4.x86_64.rpm SHA-256: 210636c2905abe975ef03c0445736310e9765adf407e01a7e8447535a4df66de
NetworkManager-glib-0.7.0-9.el5_4.i386.rpm SHA-256: c165522160bdf5907f26bdc0c0e760f3ea5c38eb9019b68efcb0063c4c72318d
NetworkManager-glib-0.7.0-9.el5_4.x86_64.rpm SHA-256: 6b65fc93f65354d59d7fedb09edfb8d546d26c1484edd7c145cd4e7317810824
NetworkManager-gnome-0.7.0-9.el5_4.x86_64.rpm SHA-256: 1f5eb8c712971b0eed2f99d99868835804332db0689663dac0132da846ef210b
i386
NetworkManager-0.7.0-9.el5_4.i386.rpm SHA-256: 089fa267e878ec04fed85e362c144d74e39fb03b93f6a88f0c54b7254b64b4a1
NetworkManager-glib-0.7.0-9.el5_4.i386.rpm SHA-256: c165522160bdf5907f26bdc0c0e760f3ea5c38eb9019b68efcb0063c4c72318d
NetworkManager-gnome-0.7.0-9.el5_4.i386.rpm SHA-256: 3786de33f9a2af34f72cbf8ca8d9cf2c749f273fe99df60d2ea50f37ca87584d

Red Hat Enterprise Linux for Power, big endian 5

SRPM
NetworkManager-0.7.0-9.el5_4.src.rpm SHA-256: 04fe1324d106be54416d2f40f5a3c7d4e6328b8714dc51d8f0900b242fef45ac
ppc
NetworkManager-0.7.0-9.el5_4.ppc.rpm SHA-256: 441c6a206ae5edf05f2473617337150ac90867208fbfa574024e00ce411bd0a2
NetworkManager-0.7.0-9.el5_4.ppc64.rpm SHA-256: 873d8704c2e51ef5725ce2246e05eca935531d7e5bb514b60c687f5193fc1659
NetworkManager-devel-0.7.0-9.el5_4.ppc.rpm SHA-256: 59ebb0743af3fc7d4593135360a8e79abe08efccc94bd8ed17e74d8392cf2db1
NetworkManager-devel-0.7.0-9.el5_4.ppc64.rpm SHA-256: f85218d1530a5ed4f0dbba4c037c66f6bf2d23d3dbde0531b56b9a0d44431913
NetworkManager-glib-0.7.0-9.el5_4.ppc.rpm SHA-256: e7ee09ee3c4054fa968698a0e5529017c919440c04abe52ff046929eb03c0d32
NetworkManager-glib-0.7.0-9.el5_4.ppc64.rpm SHA-256: 2a3cb8f734df61ea8a45516dd244eeb8c82a619fc6329425e87d29d2ce500e61
NetworkManager-glib-devel-0.7.0-9.el5_4.ppc.rpm SHA-256: 083e7d58e5f702ad8244d680cfcaf9c35d48cd3bbb029c92014a7e01fc756273
NetworkManager-glib-devel-0.7.0-9.el5_4.ppc64.rpm SHA-256: 5fb82f268a54568c9692a0671ac327388777a9ba47f6675176c7de19e5ea045f
NetworkManager-gnome-0.7.0-9.el5_4.ppc.rpm SHA-256: b394da01089599bd848248487cf282e28c285b0e7501454d93364f08fdd6770f

Red Hat Enterprise Linux Server from RHUI 5

SRPM
NetworkManager-0.7.0-9.el5_4.src.rpm SHA-256: 04fe1324d106be54416d2f40f5a3c7d4e6328b8714dc51d8f0900b242fef45ac
x86_64
NetworkManager-0.7.0-9.el5_4.i386.rpm SHA-256: 089fa267e878ec04fed85e362c144d74e39fb03b93f6a88f0c54b7254b64b4a1
NetworkManager-0.7.0-9.el5_4.x86_64.rpm SHA-256: 210636c2905abe975ef03c0445736310e9765adf407e01a7e8447535a4df66de
NetworkManager-devel-0.7.0-9.el5_4.i386.rpm SHA-256: 121ba0654b56ec4f81c2a779159aad1fafcd814fa820950b27467d55f8089369
NetworkManager-devel-0.7.0-9.el5_4.x86_64.rpm SHA-256: b07b02bebfcd526c856a26eb244e0ce0a37e7f96e28c9529c24a2486841358ab
NetworkManager-glib-0.7.0-9.el5_4.i386.rpm SHA-256: c165522160bdf5907f26bdc0c0e760f3ea5c38eb9019b68efcb0063c4c72318d
NetworkManager-glib-0.7.0-9.el5_4.x86_64.rpm SHA-256: 6b65fc93f65354d59d7fedb09edfb8d546d26c1484edd7c145cd4e7317810824
NetworkManager-glib-devel-0.7.0-9.el5_4.i386.rpm SHA-256: c93576e55dd9d6a8cf680b067c115df925e50e4c48c45a04b0dfe40536e9db20
NetworkManager-glib-devel-0.7.0-9.el5_4.x86_64.rpm SHA-256: 98e30dcb640508d8e6c7403d1d66a2ce44257251583c03997d442385ff0d33e6
NetworkManager-gnome-0.7.0-9.el5_4.x86_64.rpm SHA-256: 1f5eb8c712971b0eed2f99d99868835804332db0689663dac0132da846ef210b
i386
NetworkManager-0.7.0-9.el5_4.i386.rpm SHA-256: 089fa267e878ec04fed85e362c144d74e39fb03b93f6a88f0c54b7254b64b4a1
NetworkManager-devel-0.7.0-9.el5_4.i386.rpm SHA-256: 121ba0654b56ec4f81c2a779159aad1fafcd814fa820950b27467d55f8089369
NetworkManager-glib-0.7.0-9.el5_4.i386.rpm SHA-256: c165522160bdf5907f26bdc0c0e760f3ea5c38eb9019b68efcb0063c4c72318d
NetworkManager-glib-devel-0.7.0-9.el5_4.i386.rpm SHA-256: c93576e55dd9d6a8cf680b067c115df925e50e4c48c45a04b0dfe40536e9db20
NetworkManager-gnome-0.7.0-9.el5_4.i386.rpm SHA-256: 3786de33f9a2af34f72cbf8ca8d9cf2c749f273fe99df60d2ea50f37ca87584d

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.