openSUSE alert openSUSE-SU-2012:0101-1 (NetworkManager-gnome) [LWN.net]


From:
    	       opensuse-security@opensuse.org 
To:
    	       opensuse-updates@opensuse.org 
Subject:
    	       openSUSE-SU-2012:0101-1: moderate: NetworkManager-gnome 
Date:
    	       Thu, 19 Jan 2012 17:08:26 +0100 (CET)
Message-ID:
    	       <20120119160826.E499132294@maintenance.suse.de>
Archive-link:
    	       Article, Thread
              
   openSUSE Security Update: NetworkManager-gnome
______________________________________________________________________________

Announcement ID:    openSUSE-SU-2012:0101-1
Rating:             moderate
References:         #574266 #732700 
Affected Products:
                    openSUSE 11.4
                    openSUSE 11.3
______________________________________________________________________________

   An update that contains security fixes can now be installed.

Description:

   NetworkManager did not pin a certificate's subject to an
   ESSID. A rogue access point could therefore be used to
   conduct MITM attacks by using any other valid certificate
   issued by same CA as used in the original network
   (CVE-2006-7246).

   Please note that  existing WPA2 Enterprise connections need
   to be deleted and re-created to take advantage of the new
   security checks.

   This is a re-release of the previous update to also enable
   the checks for EAP-TLS.


Patch Instructions:

   To install this openSUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - openSUSE 11.4:

      zypper in -t patch NetworkManager-gnome-5627

   - openSUSE 11.3:

      zypper in -t patch NetworkManager-gnome-5627

   To bring your system up-to-date, use "zypper patch".


Package List:

   - openSUSE 11.4 (i586 x86_64):

      NetworkManager-gnome-0.8.2-9.16.1

   - openSUSE 11.4 (noarch):

      NetworkManager-gnome-lang-0.8.2-9.16.1

   - openSUSE 11.3 (i586 x86_64):

      NetworkManager-gnome-0.8-6.7.2


References:

   https://bugzilla.novell.com/574266
   https://bugzilla.novell.com/732700
(Log in to post comments)