NetworkManager-0.7.0-4.1AXS3

エラータID: AXSA:2009-222:01

Release date: 
Tuesday, August 4, 2009 - 14:30
Subject: 
NetworkManager-0.7.0-4.1AXS3
Affected Channels: 
Asianux Server 3 for x86_64
Asianux Server 3 for x86
Severity: 
High
Description: 

NetworkManager attempts to keep an active network connection available at all times. It is intended only for the desktop use-case, and is not intended for usage on servers. The point of NetworkManager is to make networking configuration and setup as painless and automatic as possible. If using DHCP, NetworkManager is intended to replace default routes, obtain IP addresses from a DHCP server, and change nameservers whenever it sees fit.
Fixed bugs:
CVE-2009-0365
nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover (1) network connection passwords and (2) pre-shared keys via calls to the GetSecrets method in the dbus request handler.

CVE-2009-0578
GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local users to change or remove the network connections of arbitrary users via unspecified vectors related to org.freedesktop.NetworkManagerUserSettings and at_console.
Other bugs:
- Moved libnm-util.so.* to glib package from main package, so glib package will not require main package.

Solution: 

Update packages.

Additional Info: 

From Asianux Server 3 SP2 updated packages.

Download: 

SRPMS
  1. NetworkManager-0.7.0-4.1AXS3.src.rpm
    MD5: dedfb301da1f090228fd4fd0e09990ab
    SHA-256: 8255ffe27657a2255e709621e672e53b1ca9ccfd6f040123b393f3d86379d107
    Size: 2.98 MB

Asianux Server 3 for x86
  1. NetworkManager-glib-0.7.0-4.1AXS3.i386.rpm
    MD5: 1dd21c8a62b9f44ee9cb9aa28fb759d0
    SHA-256: 0cd69d2d8cf4928a24eafa913ed432904d0c587132bc39a2289a66e3e814930d
    Size: 151.32 kB

Asianux Server 3 for x86_64
  1. NetworkManager-glib-0.7.0-4.1AXS3.x86_64.rpm
    MD5: fbd88b6565504709cbe7e048894b90f4
    SHA-256: 1123680bc76230c7b395e48b3bfb81fe860b1d9762a8e5f39133075ba2a98ce0
    Size: 153.69 kB