[SECURITY] Fedora 9 Update: NetworkManager-openvpn-0.7.0.99-1.fc9

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-2420
2009-03-08 06:09:08
--------------------------------------------------------------------------------

Name        : NetworkManager-openvpn
Product     : Fedora 9
Version     : 0.7.0.99
Release     : 1.fc9
URL         : http://www.gnome.org/projects/NetworkManager/
Summary     : NetworkManager VPN plugin for OpenVPN
Description :
This package contains software for integrating the OpenVPN VPN software
with NetworkManager and the GNOME desktop.

--------------------------------------------------------------------------------
ChangeLog:

* Thu Mar  5 2009 Dan Williams <dcbw at redhat.com> 1:0.7.0.99-1
- Update to 0.7.1rc3
* Mon Feb 23 2009 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1:0.7.0.97-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
* Thu Feb 19 2009 Dan Williams <dcbw at redhat.com> 1:0.7.0.97-1
- Update to 0.7.1rc1
- Handle HMAC Authentication (--auth)
- Handle TAP device subnet masks correctly
- Don't segfault if the connection type is invalid
* Sat Jan  3 2009 Dan Williams <dcbw at redhat.com> 1:0.7.0-18.svn11
- Rebuild for updated NetworkManager
- Fix some specfile issues (rh #477149)
* Sat Dec 20 2008 Christoph Höger <choeger at cs.tu-berlin.de> 0.7.0-17.svn4326
- removed libpng-devel from BuildRequires, added /usr/share/gnome-vpn-properties/openvpn/ (rh #477149)
* Fri Nov 21 2008 Dan Williams <dcbw at redhat.com> 1:0.7.0-16.svn4326
- Rebuild for updated NetworkManager
* Mon Oct 27 2008 Dan Williams <dcbw at redhat.com> 1:0.7.0-16.svn4229
- Rebuild for updated NetworkManager
* Sun Oct 12 2008 Dan Williams <dcbw at redhat.com> 1:0.7.0-16.svn4175
- Rebuild for updated NetworkManager
- Allow changing passwords from the connection editor
- Honor OpenVPN's 'route-vpn-gateway' option
* Tue Sep 30 2008 Dan Williams <dcbw at redhat.com> 1:0.7.0-16.svn4027
- Fix order of Password TLS certificate choosers (rh #464765)
- Use /usr/lib/rpm/find-lang.sh /var/tmp/NetworkManager-openvpn-0.7.0.99-root for locale-specific files (rh #448551)
- Fix --script-security issues with OpenVPN 2.1-rc9 and later (rh #460754)
* Fri Aug 29 2008 Dan Williams <dcbw at redhat.com> 1:0.7.0-15.svn4027
- Rebuild for updated NetworkManager
* Mon Aug 11 2008 Dan Williams <dcbw at redhat.com> 1:0.7.0-15.svn3930
- Rebuild for updated NetworkManager
* Thu Jul 24 2008 Dan Williams <dcbw at redhat.com> 1:0.7.0-15.svn3846
- Rebuild to sync with F9 release number
* Thu Jul 24 2008 Dan Williams <dcbw at redhat.com> 1:0.7.0-11.svn3846
- Fix TLS Authentication direction combo
- Only update settings if the advanced dialog's OK button is pressed
* Fri Jul 18 2008 Dan Williams <dcbw at redhat.com> 1:0.7.0-11.svn3832
- Update for NM netmask -> prefix changes
* Wed Jul  2 2008 Dan Williams <dcbw at redhat.com> 1:0.7.0-11.svn3801
- Update for moving VPN editing into connection manager
- Import OpenVPN configuration files rather than old custom format
* Tue Jun 24 2008 Christoph Höger <choeger at cs.tu-berlin.de> 1:0.7.0-14.svn3632
- revoke last change
- openvpn seems to be buggy itself
* Fri Jun 13 2008 Christoph Höger <choeger at cs.tu-berlin.de> 1:0.7.0-13.svn3632
- Fix getting remote ip
- fixes #446335
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #487722 - CVE-2009-0365 NetworkManager: GetSecrets disclosure
        https://bugzilla.redhat.com/show_bug.cgi?id=487722
  [ 2 ] Bug #487752 - CVE-2009-0578 NetworkManager: local users can modify the connection settings
        https://bugzilla.redhat.com/show_bug.cgi?id=487752
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update NetworkManager-openvpn' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------