[SECURITY] Fedora 16 Update: NetworkManager-

updates at fedoraproject.org updates at fedoraproject.org
Fri Sep 30 19:31:09 UTC 2011

Fedora Update Notification
2011-09-28 18:47:03

Name        : NetworkManager
Product     : Fedora 16
Version     :
Release     : 3.git20110927.fc16
URL         : http://www.gnome.org/projects/NetworkManager/
Summary     : Network connection manager and user applications
Description :
NetworkManager is a system network service that manages your network devices
and connections, attempting to keep active network connectivity when available.
It manages ethernet, WiFi, mobile broadband (WWAN), and PPPoE devices, and
provides VPN integration with a variety of different VPN services.

Update Information:

This update fixes security issue in ifcfg-rh plugin (CVE-2011-3364).  This update also fixes an applet and connection editor crash caused by mis-packaging of some UI-related files, and corrects the path of iscsiadm.  This update further adds the ability to delete connections from nmcli, correctly handles IPv6 link-local DNS servers when using the dnsmasq local caching nameserver plugin, and fixes connection timestamps for VPN connections.

* Tue Sep 27 2011 Dan Williams <dcbw at redhat.com> -
- core: fix location of wifi.ui (rh #741448)
* Tue Sep 27 2011 Jiří Klimeš <jklimes at redhat.com> -
- core: ifcfg-rh: remove newlines when writing to ifcfg files (CVE-2011-3364) (rh #737338)
- core: change iscsiadm path to /sbin/iscsiadm in ifcfg-rh plugin (rh #740753)
- core: fix refcounting when deleting a default wired connection (lp:797868)
* Mon Sep 19 2011 Dan Williams <dcbw at redhat.com> -
- Update to (0.9.2-beta1)
- core: fix IPv6 link-local DNS servers in the dnsmasq DNS plugin
- cli: add ability to delete connections
- keyfile: fix an issue with duplicated keyfile connections
- core: ensure the 'novj' option is passed through to pppd
- core: store timestamps for VPN connections too (rh #725353)

  [ 1 ] Bug #737338 - CVE-2011-3364 NetworkManager: Console user can escalate to root via newlines in ifcfg-rh connection name

This update can be installed with the "yum" update program.  Use 
su -c 'yum update NetworkManager' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at

More information about the package-announce mailing list