[Desktop-packages] [Bug 1450066] Re: IPv6 hop limit set to 0

2015-06-23 Thread Marcel Nageler
This issue may be resolved by providing a newer version of
networkmanager (>= 0.9.10.2)

In this version a patch was introduced to mitigate CVE-2015-2922 (don't allow 
setting the HL smaller than it was before)
This patch also makes sure a HL < 10 does not get set.

[ 1 ] The changelog of version 0.9.10.2
 http://www.pro-linux.de/sicherheit/2/print/30542/index.html

[ 2 ] CVE-2015-2922 kernel: denial of service (DoS) attack against IPv6 network 
stacks due to improper handling of Router Advertisements.
https://access.redhat.com/security/cve/CVE-2015-2922

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2015-2922

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to network-manager in Ubuntu.
https://bugs.launchpad.net/bugs/1450066

Title:
  IPv6 hop limit set to 0

Status in network-manager package in Ubuntu:
  Triaged
Status in network-manager source package in Vivid:
  Triaged

Bug description:
  On upgrading from Ubuntu 14.10 to 15.04 I found that my IPv6
  networking no longer worked. It turned out that this was because my
  hop limit was set to zero:

  # sysctl -a | fgrep eth0.hop_limit
  net.ipv6.conf.eth0.hop_limit = 0

  which in turn seems to have been cause by a known problem in the
  network manager:

  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=756534
  https://bugzilla.gnome.org/show_bug.cgi?id=737252

  Since this has already been fixed in the GNOME project, can Ubuntu
  15.04 please take the upstream fix?

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/network-manager/+bug/1450066/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1450066] Re: IPv6 hop limit set to 0

2015-06-23 Thread Marcel Nageler
This bug is due to a failure in handling router advertisments.

According to RFC 4861 (page 20) a _Cur Hop Limit_ set to 0  means, that
the Hop Limit is unspecified. Ubuntu 15.04 takes this literally and sets
HL to 0.

Fortunately my router provided the option to set this field to a manual
value, altough i suppose this is not the case for most routers.

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to network-manager in Ubuntu.
https://bugs.launchpad.net/bugs/1450066

Title:
  IPv6 hop limit set to 0

Status in network-manager package in Ubuntu:
  Triaged
Status in network-manager source package in Vivid:
  Triaged

Bug description:
  On upgrading from Ubuntu 14.10 to 15.04 I found that my IPv6
  networking no longer worked. It turned out that this was because my
  hop limit was set to zero:

  # sysctl -a | fgrep eth0.hop_limit
  net.ipv6.conf.eth0.hop_limit = 0

  which in turn seems to have been cause by a known problem in the
  network manager:

  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=756534
  https://bugzilla.gnome.org/show_bug.cgi?id=737252

  Since this has already been fixed in the GNOME project, can Ubuntu
  15.04 please take the upstream fix?

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/network-manager/+bug/1450066/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp