openSUSE alert openSUSE-SU-2011:1273-1 (NetworkManager)

From:
    	     
 
opensuse-security@opensuse.org 
To:
    	     
 
opensuse-updates@opensuse.org 
Subject:
    	     
 
openSUSE-SU-2011:1273-1: moderate: NetworkManager 
Date:
    	     
 
Tue, 22 Nov 2011 21:08:17 +0100 (CET)
Message-ID:
    	     
 
<20111122200817.403D03224D@maintenance.suse.de>
Archive-link:
    	     
 
Article, Thread
              
   openSUSE Security Update: NetworkManager
______________________________________________________________________________

Announcement ID:    openSUSE-SU-2011:1273-1
Rating:             moderate
References:         #574266 #702016 
Cross-References:   CVE-2006-7246 CVE-2011-2176
Affected Products:
                    openSUSE 11.4
                    openSUSE 11.3
______________________________________________________________________________

   An update that fixes two vulnerabilities is now available.

Description:

   NetworkManager did not pin a certificate's subject to an
   ESSID. A rogue access point could therefore be used to
   conduct MITM attacks by using any other valid certificate
   issued by same CA as used in the original network
   (CVE-2006-7246).

   Please note that  existing WPA2 Enterprise connections need
   to be deleted and re-created to take advantage of the new
   security checks.

   NetworkManager did not honor the PolicyKit auth_admin
   setting when creating Ad-Hoc wireless networks
   (CVE-2011-2176)


Special Instructions and Notes:

   Please reboot the system after installing this update.

Patch Instructions:

   To install this openSUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - openSUSE 11.4:

      zypper in -t patch NetworkManager-5373

   - openSUSE 11.3:

      zypper in -t patch NetworkManager-5373

   To bring your system up-to-date, use "zypper patch".


Package List:

   - openSUSE 11.4 (i586 x86_64):

      NetworkManager-0.8.2-15.28.1
      NetworkManager-devel-0.8.2-15.28.1
      NetworkManager-doc-0.8.2-15.28.1
      NetworkManager-glib-0.8.2-15.28.1
      NetworkManager-gnome-0.8.2-9.12.1
      wpa_supplicant-0.7.3-3.4.1
      wpa_supplicant-gui-0.7.3-3.4.1

   - openSUSE 11.4 (noarch):

      NetworkManager-gnome-lang-0.8.2-9.12.1
      NetworkManager-lang-0.8.2-15.28.1

   - openSUSE 11.3 (i586 x86_64):

      NetworkManager-0.8-8.13.1
      NetworkManager-devel-0.8-8.13.1
      NetworkManager-doc-0.8-8.13.1
      NetworkManager-glib-0.8-8.13.1
      NetworkManager-gnome-0.8-6.3.2
      wpa_supplicant-0.7.1-5.3.1
      wpa_supplicant-gui-0.7.1-5.3.1


References:

   http://support.novell.com/security/cve/CVE-2006-7246.html
   http://support.novell.com/security/cve/CVE-2011-2176.html
   https://bugzilla.novell.com/574266
   https://bugzilla.novell.com/702016