RHSA-2016:2581 - Security Advisory

Topic

An update for NetworkManager is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services.

The following packages have been upgraded to a newer upstream version: NetworkManager (1.4.0), NetworkManager-libreswan (1.2.4), network-manager-applet (1.4.0), libnl3 (3.2.28). (BZ#1264552, BZ#1296058, BZ#1032717, BZ#1271581)

Security Fix(es):

• A race condition vulnerability was discovered in NetworkManager. Temporary files were created insecurely when saving or updating connection settings, which could allow local users to read connection secrets such as VPN passwords or WiFi keys. (CVE-2016-0764)

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.3 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.5 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.3 x86_64
• Red Hat Enterprise Linux Server - AUS 7.6 x86_64
• Red Hat Enterprise Linux Server - AUS 7.4 x86_64
• Red Hat Enterprise Linux Server - AUS 7.3 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux for IBM z Systems 7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.6 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.5 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.4 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.3 s390x
• Red Hat Enterprise Linux for Power, big endian 7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.6 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.5 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.4 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.3 ppc64
• Red Hat Enterprise Linux for Scientific Computing 7 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.7 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.6 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.5 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.4 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.3 x86_64
• Red Hat Enterprise Linux Server - AUS 7.7 x86_64
• Red Hat Enterprise Linux for Power, little endian 7 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.7 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.6 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.5 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.4 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.3 ppc64le
• Red Hat Enterprise Linux Server - TUS 7.7 x86_64
• Red Hat Enterprise Linux Server - TUS 7.6 x86_64
• Red Hat Enterprise Linux Server - TUS 7.3 x86_64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.7 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.6 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.4 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.3 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.3 x86_64

Fixes

• BZ - 1183420 - Adding bond device to bridge with "bridge-slave" type doesn't work.
• BZ - 1217288 - [enh] Configuration snapshots and rollbacks
• BZ - 1228707 - it would make sense for NM to allow specifying an order for DNS servers
• BZ - 1243958 - network-online.target met before IPv6 is up
• BZ - 1255507 - NetworkManager no longer provides complete FQDN (DHCP_HOSTNAME) to dhclient
• BZ - 1257237 - NetworkManager loops and takes CPU until it dies when teamd is unresponsive
• BZ - 1270814 - Setting up team with invalid json config leads to inconsistent state
• BZ - 1271271 - incorrect completion of bluetooth device in nmcli
• BZ - 1271581 - available bluetooth devices should be listed in connection wizard
• BZ - 1277247 - NM crashing when upping libreswan connection as secondary
• BZ - 1278506 - [abrt] NetworkManager: ipv4acd_on_timeout(): NetworkManager killed by SIGABRT
• BZ - 1281301 - NetworkManager infiniband connected mode fails with some adapters
• BZ - 1284261 - Default-route doesn't get removed when disconnecting device externally (on lost carrier, unplug cable)
• BZ - 1285367 - nm-libreswan-service abort when trying to establish vpn connection to RH intranet
• BZ - 1286105 - ipv6 address on team.vlan interface disappear sometimes
• BZ - 1289523 - Mobile broadband (WWAN) connection not detected after suspend
• BZ - 1294728 - the team connection becomes incorrect after I restart NetworkManager
• BZ - 1296058 - rebase libnl3 package to new upstream version for rhel-7.3
• BZ - 1298732 - regression: Fails to connect to Red Hat VPN
• BZ - 1300755 - ifup network with an interface name with more than 16 characters
• BZ - 1301389 - [abrt] NetworkManager: check_if_startup_complete(): NetworkManager killed by SIGSEGV
• BZ - 1303968 - NetworkManager Bridged Team MTU Fails to Set
• BZ - 1304641 - bond profile doubling after restart with manual ipv6 (or ignore)
• BZ - 1309899 - RHEL7.2: default route for vlan devices does not get added on boot
• BZ - 1310435 - default team profile should load some default config
• BZ - 1312281 - NetworkManager ignores the REORDER_HDR flag for VLAN connections
• BZ - 1313091 - the restart of NetworkManager service disables a configured connection and creates a dynamic connection
• BZ - 1313836 - broadband PIN dialog wont appear
• BZ - 1323571 - failed to disable userspace IPv6LL address handling
• BZ - 1324025 - CVE-2016-0764 NetworkManager: Race condition allowing info leak
• BZ - 1325752 - Vlan devices do not inherit the bonding device MAC address when bonding driver is reloaded
• BZ - 1330090 - Fails to connect to ethernet after update to 1:NetworkManager-1.2.0-0.1.beta3.el7.x86_64
• BZ - 1330694 - NM does not run pre-down scripts on suspend/sleep/hibernate
• BZ - 1330893 - NetworkManager.service never reaches its 'startup complete' state IFF MTU=9000 (ixgbe driver)
• BZ - 1331395 - [abrt] [faf] NetworkManager: unknown function(): /usr/sbin/NetworkManager killed by 11
• BZ - 1333983 - Restarting NetworkManager causes devices to be lost from the network connections
• BZ - 1334876 - rename package NetworkManager-config-routing-rules to NetworkManager-dispatcher-routing-rules
• BZ - 1334913 - NetworkManager spec file calls rpm to determine ppp version which fails in mock builds
• BZ - 1337222 - Please consider managing /etc/resolv.conf not a symlink
• BZ - 1337300 - file completion doesn't work for libreswan import
• BZ - 1339565 - Can't press "create" button via keyboard when create network on p2v client
• BZ - 1341635 - IPv6 address not assigned to VLAN subinterface when assigned immediately after device creation
• BZ - 1344757 - NetworkManager warning/error on T460s/p during suspend
• BZ - 1347015 - double up of team leads to nmc223.6 c651] tuaps: Ne workManager[30546] trap int3 ip:7fbdd56bb643 sp:7ffc02c09b40 error:0
• BZ - 1347810 - GCC fails when including libnl3 header
• BZ - 1348573 - cannot set lp_interval to bond balance-tlb (or alb) mode
• BZ - 1348901 - vpn dns record is not deleted when profile goes down
• BZ - 1349740 - 20 seconds timeout is not sufficient for VPN password entry
• BZ - 1349749 - [abrt] [faf] NetworkManager: g_logv(): /usr/sbin/NetworkManager killed by 5
• BZ - 1351272 - show name if ask is specified for 802.1x connections
• BZ - 1351633 - [abrt] [faf] NetworkManager: g_logv(): /usr/sbin/NetworkManager killed by 5
• BZ - 1355656 - Deleting a bridge with a slave attached leaves the slave with a nonexistent master
• BZ - 1355740 - [abrt] [faf] NetworkManager: unknown function(): /usr/bin/nmcli killed by 11
• BZ - 1356015 - Hostname is 'localhost.localdomain' after distro installation
• BZ - 1357738 - The device's master is unset when downed outside NetworkManager
• BZ - 1358335 - NetworkManager log messages are missing in /tmp/syslog
• BZ - 1362542 - warn nicely about insufficient permissions when changing logging level
• BZ - 1364275 - Unable to set up mtu on bonded interface in RHEL 7.2
• BZ - 1366300 - network team device configuration in kickstart pre section not working
• BZ - 1367180 - Failure to configure team with ifcfg
• BZ - 1367736 - after ipv4.manual and ipv4.addresses entries are added prompt gets stuck
• BZ - 1367737 - nmcli asks for ipv4 and ipv6 method even if these were specified
• BZ - 1368354 - [abrt] [faf] NetworkManager: raise(): /usr/sbin/NetworkManager killed by 6
• BZ - 1368355 - [abrt] [faf] NetworkManager: raise(): /usr/sbin/NetworkManager killed by 5
• BZ - 1368761 - [NetworkManager] - 'nmcli' Bond slaves remain with BOOTPRORTO=dhcp although we configured them with disabled method
• BZ - 1370503 - backport "route/addr: address attributes based on object"
• BZ - 1371201 - [anaconda ibft] ibft plugin stopped working in 7.3 due to /sbin/iscsiadm failing.
• BZ - 1371623 - fatal failure to set MAC address on wifi
• BZ - 1371920 - D-Bus signal PropertiesChanged emitted for wrong interface type
• BZ - 1371967 - incorrect team config not refused but nullified
• BZ - 1372799 - regression in libnm serializing "cloned-mac-address" which causes failure to edit property in nmtui
• BZ - 1373276 - DHCP timeout due to race condition calling nm-dhcp-helper
• BZ - 1374526 - backport fix for crash in libnm's nm_vpn_plugin_info_list_get_service_types()
• BZ - 1375933 - no tab completion in nmcli after ifname
• BZ - 1376784 - segfault when Reapplying slave connection, without changes
• BZ - 1378809 - installation of 1.4.0 NM is possible onto 7.2 but it's not working w/o newer glib2

CVEs

• CVE-2016-0764

References

• https://access.redhat.com/security/updates/classification/#low