-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-e603289e79 2018-07-26 12:45:05.654417 --------------------------------------------------------------------------------
Name : NetworkManager-vpnc Product : Fedora EPEL 7 Version : 1.2.6 Release : 1.el7 URL : http://www.gnome.org/projects/NetworkManager/ Summary : NetworkManager VPN plugin for vpnc Description : This package contains software for integrating VPN capabilities with the vpnc server with NetworkManager.
-------------------------------------------------------------------------------- Update Information:
Update to 1.2.6 to fix a local authenticated privilege escalation bug (CVE-2018-10900). The issue has been discovered and responsibly disclosed by Denis Andzakovic: https://pulsesecurity.co.nz/advisories/NM-VPNC-Privesc -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1605919 - CVE-2018-10900 NetworkManager-vpnc: privilege escalation allows to execute arbitrary commands as root https://bugzilla.redhat.com/show_bug.cgi?id=1605919 --------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use su -c 'yum update NetworkManager-vpnc' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/htm...
All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
epel-package-announce@lists.fedoraproject.org