Red Hat Security Advisory

RHSA-2018:3665

NetworkManager security update

Released 2018-11-27 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) NetworkManager-1:1.12.0-8.el7_6, NetworkManager-adsl-1:1.12.0-8.el7_6, NetworkManager-bluetooth-1:1.12.0-8.el7_6 +7
Red Hat Enterprise Linux Client Optional (v. 7) NetworkManager-config-server-1:1.12.0-8.el7_6, NetworkManager-dispatcher-routing-rules-1:1.12.0-8.el7_6, NetworkManager-glib-devel-1:1.12.0-8.el7_6 +2
Red Hat Enterprise Linux ComputeNode (v. 7) NetworkManager-1:1.12.0-8.el7_6, NetworkManager-adsl-1:1.12.0-8.el7_6, NetworkManager-bluetooth-1:1.12.0-8.el7_6 +7
Red Hat Enterprise Linux ComputeNode Optional (v. 7) NetworkManager-config-server-1:1.12.0-8.el7_6, NetworkManager-dispatcher-routing-rules-1:1.12.0-8.el7_6, NetworkManager-glib-devel-1:1.12.0-8.el7_6 +2
Red Hat Enterprise Linux Server (v. 7) NetworkManager-1:1.12.0-8.el7_6, NetworkManager-adsl-1:1.12.0-8.el7_6, NetworkManager-bluetooth-1:1.12.0-8.el7_6 +10
Red Hat Enterprise Linux Server Optional (v. 7) NetworkManager-dispatcher-routing-rules-1:1.12.0-8.el7_6, NetworkManager-glib-devel-1:1.12.0-8.el7_6, NetworkManager-glib-devel-1:1.12.0-8.el7_6.ppc +3
Red Hat Enterprise Linux Workstation (v. 7) NetworkManager-1:1.12.0-8.el7_6, NetworkManager-adsl-1:1.12.0-8.el7_6, NetworkManager-bluetooth-1:1.12.0-8.el7_6 +7
Red Hat Enterprise Linux Workstation Optional (v. 7) NetworkManager-config-server-1:1.12.0-8.el7_6, NetworkManager-dispatcher-routing-rules-1:1.12.0-8.el7_6, NetworkManager-glib-devel-1:1.12.0-8.el7_6 +2
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) NetworkManager-1:1.12.0-8.el7_6, NetworkManager-adsl-1:1.12.0-8.el7_6, NetworkManager-bluetooth-1:1.12.0-8.el7_6 +8
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) NetworkManager-dispatcher-routing-rules-1:1.12.0-8.el7_6, NetworkManager-glib-devel-1:1.12.0-8.el7_6, NetworkManager-libnm-devel-1:1.12.0-8.el7_6 +1

Fixes 1 record

TI-2018-11178 CVE-2018-15688 · GHSA-8h24-cwhj-2xgm

Out-of-Bounds write in systemd-networkd dhcpv6 option handling

MEDIUM 43

A buffer overflow vulnerability in the dhcp6 client of systemd allows a malicious dhcp6 server to overwrite heap memory in systemd-networkd.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01666 Published 2018-10-26 Fixed CWE-120