SUSE-SU-2012:0260-1: moderate: Security update for NetworkManager-gnome

[sle-security-updates at lists.suse.com]

   SUSE Security Update: Security update for NetworkManager-gnome
______________________________________________________________________________

Announcement ID:    SUSE-SU-2012:0260-1
Rating:             moderate
References:         #574266 #732700 
Affected Products:
                    SUSE Linux Enterprise Server 11 SP1 for VMware
                    SUSE Linux Enterprise Server 11 SP1
                    SUSE Linux Enterprise Desktop 11 SP1
______________________________________________________________________________

   An update that contains security fixes can now be
   installed. It includes one version update.

Description:


   NetworkManager did not pin a certificate's subject to an
   ESSID. A rogue  access point could therefore be used to
   conduct MITM attacks by using any  other valid certificate
   issued by same CA as used in the original network
   (CVE-2006-7246).

   Please note that existing WPA2 Enterprise connections need
   to be deleted  and re-created to take advantage of the new
   security checks.

   This is a re-release of the previous update to also enable
   the checks for  EAP-TLS.


Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Server 11 SP1 for VMware:

      zypper in -t patch slessp1-NetworkManager-gnome-5621

   - SUSE Linux Enterprise Server 11 SP1:

      zypper in -t patch slessp1-NetworkManager-gnome-5621

   - SUSE Linux Enterprise Desktop 11 SP1:

      zypper in -t patch sledsp1-NetworkManager-gnome-5621

   To bring your system up-to-date, use "zypper patch".


Package List:

   - SUSE Linux Enterprise Server 11 SP1 for VMware (i586 x86_64) [New Version: 0.7.1]:

      NetworkManager-gnome-0.7.1-5.15.11.1

   - SUSE Linux Enterprise Server 11 SP1 (i586 ia64 ppc64 s390x x86_64) [New Version: 0.7.1]:

      NetworkManager-gnome-0.7.1-5.15.11.1

   - SUSE Linux Enterprise Desktop 11 SP1 (i586 x86_64) [New Version: 0.7.1]:

      NetworkManager-gnome-0.7.1-5.15.11.1


References:

   https://bugzilla.novell.com/574266
   https://bugzilla.novell.com/732700
   http://download.novell.com/patch/finder/?keywords=c7f58cba030474918054f80ae9b9d8f5