Synopsis:          Low: NetworkManager security, bug fix, and enhancement update
Advisory ID:       SLSA-2016:2581-2
Issue Date:        2016-11-03
CVE Numbers:       CVE-2016-0764
--

The following packages have been upgraded to a newer upstream version:
NetworkManager (1.4.0), NetworkManager-libreswan (1.2.4), network-manager-
applet (1.4.0), libnl3 (3.2.28).

Security Fix(es):

* A race condition vulnerability was discovered in NetworkManager.
Temporary files were created insecurely when saving or updating connection
settings, which could allow local users to read connection secrets such as
VPN passwords or WiFi keys. (CVE-2016-0764)

Additional Changes:
--

SL7
  x86_64
    NetworkManager-1.4.0-12.el7.x86_64.rpm
    NetworkManager-adsl-1.4.0-12.el7.x86_64.rpm
    NetworkManager-bluetooth-1.4.0-12.el7.x86_64.rpm
    NetworkManager-debuginfo-1.4.0-12.el7.i686.rpm
    NetworkManager-debuginfo-1.4.0-12.el7.x86_64.rpm
    NetworkManager-glib-1.4.0-12.el7.i686.rpm
    NetworkManager-glib-1.4.0-12.el7.x86_64.rpm
    NetworkManager-libnm-1.4.0-12.el7.i686.rpm
    NetworkManager-libnm-1.4.0-12.el7.x86_64.rpm
    NetworkManager-libreswan-1.2.4-1.el7.x86_64.rpm
    NetworkManager-libreswan-debuginfo-1.2.4-1.el7.x86_64.rpm
    NetworkManager-libreswan-gnome-1.2.4-1.el7.x86_64.rpm
    NetworkManager-team-1.4.0-12.el7.x86_64.rpm
    NetworkManager-tui-1.4.0-12.el7.x86_64.rpm
    NetworkManager-wifi-1.4.0-12.el7.x86_64.rpm
    NetworkManager-wwan-1.4.0-12.el7.x86_64.rpm
    libnl3-3.2.28-2.el7.i686.rpm
    libnl3-3.2.28-2.el7.x86_64.rpm
    libnl3-cli-3.2.28-2.el7.i686.rpm
    libnl3-cli-3.2.28-2.el7.x86_64.rpm
    libnl3-debuginfo-3.2.28-2.el7.i686.rpm
    libnl3-debuginfo-3.2.28-2.el7.x86_64.rpm
    libnm-gtk-1.4.0-2.el7.i686.rpm
    libnm-gtk-1.4.0-2.el7.x86_64.rpm
    libnma-1.4.0-2.el7.i686.rpm
    libnma-1.4.0-2.el7.x86_64.rpm
    network-manager-applet-debuginfo-1.4.0-2.el7.i686.rpm
    network-manager-applet-debuginfo-1.4.0-2.el7.x86_64.rpm
    nm-connection-editor-1.4.0-2.el7.x86_64.rpm
    NetworkManager-config-server-1.4.0-12.el7.x86_64.rpm
    NetworkManager-glib-devel-1.4.0-12.el7.i686.rpm
    NetworkManager-glib-devel-1.4.0-12.el7.x86_64.rpm
    NetworkManager-libnm-devel-1.4.0-12.el7.i686.rpm
    NetworkManager-libnm-devel-1.4.0-12.el7.x86_64.rpm
    libnl3-devel-3.2.28-2.el7.i686.rpm
    libnl3-devel-3.2.28-2.el7.x86_64.rpm
    libnl3-doc-3.2.28-2.el7.x86_64.rpm
    libnm-gtk-devel-1.4.0-2.el7.i686.rpm
    libnm-gtk-devel-1.4.0-2.el7.x86_64.rpm
    libnma-devel-1.4.0-2.el7.i686.rpm
    libnma-devel-1.4.0-2.el7.x86_64.rpm
    network-manager-applet-1.4.0-2.el7.x86_64.rpm
  noarch
    NetworkManager-dispatcher-routing-rules-1.4.0-12.el7.noarch.rpm

- Scientific Linux Development Team