openSUSE-SU-2011:1273-1: moderate: NetworkManager - openSUSE Updates

22 Nov 2011


      openSUSE Security Update: NetworkManager
______________________________________________________________________________
Announcement ID:    openSUSE-SU-2011:1273-1
Rating:             moderate
References:         #574266 #702016 
Cross-References:   CVE-2006-7246 CVE-2011-2176
Affected Products:
                    openSUSE 11.4
                    openSUSE 11.3
______________________________________________________________________________
An update that fixes two vulnerabilities is now available.
Description:
NetworkManager did not pin a certificate's subject to an
   ESSID. A rogue access point could therefore be used to
   conduct MITM attacks by using any other valid certificate
   issued by same CA as used in the original network
   (CVE-2006-7246).
Please note that  existing WPA2 Enterprise connections need
   to be deleted and re-created to take advantage of the new
   security checks.
NetworkManager did not honor the PolicyKit auth_admin
   setting when creating Ad-Hoc wireless networks
   (CVE-2011-2176)
Special Instructions and Notes:
Please reboot the system after installing this update.
Patch Instructions:
To install this openSUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:
- openSUSE 11.4:
zypper in -t patch NetworkManager-5373
- openSUSE 11.3:
zypper in -t patch NetworkManager-5373
To bring your system up-to-date, use "zypper patch".
Package List:
- openSUSE 11.4 (i586 x86_64):
NetworkManager-0.8.2-15.28.1
      NetworkManager-devel-0.8.2-15.28.1
      NetworkManager-doc-0.8.2-15.28.1
      NetworkManager-glib-0.8.2-15.28.1
      NetworkManager-gnome-0.8.2-9.12.1
      wpa_supplicant-0.7.3-3.4.1
      wpa_supplicant-gui-0.7.3-3.4.1
- openSUSE 11.4 (noarch):
NetworkManager-gnome-lang-0.8.2-9.12.1
      NetworkManager-lang-0.8.2-15.28.1
- openSUSE 11.3 (i586 x86_64):
NetworkManager-0.8-8.13.1
      NetworkManager-devel-0.8-8.13.1
      NetworkManager-doc-0.8-8.13.1
      NetworkManager-glib-0.8-8.13.1
      NetworkManager-gnome-0.8-6.3.2
      wpa_supplicant-0.7.1-5.3.1
      wpa_supplicant-gui-0.7.1-5.3.1
References:
http://support.novell.com/security/cve/CVE-2006-7246.html
   http://support.novell.com/security/cve/CVE-2011-2176.html
   https://bugzilla.novell.com/574266
   https://bugzilla.novell.com/702016