SUSE-SU-2012:0096-1: moderate: Security update for sysconfig

[sle-security-updates at lists.suse.com]

   SUSE Security Update: Security update for sysconfig
______________________________________________________________________________

Announcement ID:    SUSE-SU-2012:0096-1
Rating:             moderate
References:         #559170 #580018 #697929 #735394 
Cross-References:   CVE-2011-4182
Affected Products:
                    SUSE Linux Enterprise Server 11 SP1 for VMware
                    SUSE Linux Enterprise Server 11 SP1
                    SUSE Linux Enterprise Desktop 11 SP1
______________________________________________________________________________

   An update that solves one vulnerability and has three fixes
   is now available. It includes one version update.

Description:


   sysconfig hook script for NetworkManager did not properly
   quote shell meta  characters when processing ESSIDs.
   Specially crafted network names could  have therefore lead
   to execution of shell code (CVE-2011-4182).

   In addition, the following non-security bugs were fixed:

   * 580018: ip addr flush $ifname causes vanishing
   /proc/sys/net/ipv6/conf/$ifname
   * 697929: ipv6, rcnetwork returns before dad completed

   Security Issue reference:

   * CVE-2011-4182
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4182
   >


Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Server 11 SP1 for VMware:

      zypper in -t patch slessp1-sysconfig-5618

   - SUSE Linux Enterprise Server 11 SP1:

      zypper in -t patch slessp1-sysconfig-5618

   - SUSE Linux Enterprise Desktop 11 SP1:

      zypper in -t patch sledsp1-sysconfig-5618

   To bring your system up-to-date, use "zypper patch".


Package List:

   - SUSE Linux Enterprise Server 11 SP1 for VMware (i586 x86_64) [New Version: 0.71.31]:

      sysconfig-0.71.31-0.7.1

   - SUSE Linux Enterprise Server 11 SP1 (i586 ia64 ppc64 s390x x86_64) [New Version: 0.71.31]:

      sysconfig-0.71.31-0.7.1

   - SUSE Linux Enterprise Desktop 11 SP1 (i586 x86_64) [New Version: 0.71.31]:

      sysconfig-0.71.31-0.7.1


References:

   http://support.novell.com/security/cve/CVE-2011-4182.html
   https://bugzilla.novell.com/559170
   https://bugzilla.novell.com/580018
   https://bugzilla.novell.com/697929
   https://bugzilla.novell.com/735394
   http://download.novell.com/patch/finder/?keywords=aa0816550d60556e068c0eb2b662fb17