[Buildroot] [PATCH 2/2] package/network-manager: Add upstream patch to fix CVE-2018-15688
peter at korsgaard.com
Wed Nov 14 09:35:04 UTC 2018
>>>>> "Bernd" == Bernd Kuhls <bernd.kuhls at t-online.de> writes:
> NetworkManager includes some parts of the systemd-networkd code in its
> codebase. That can be found at src/systemd/src/libsystemd-networkd.
> The DHCP implementation provided by systemd-networkd is used when
> NetworkManager is configured to use the internal implementation,
> however the default is to use dhclient.
> When NetworkManager is configured to use the internal dhcp and an
> interface is setup with ipv6.method=auto (which is the default value)
> or ipv6.method=dhcp, this flaw can be exploited. When using
> ipv6.method=auto, the DHCPv6 client can be automatically started with a
> Router Advertisement packet.
> Signed-off-by: Bernd Kuhls <bernd.kuhls at t-online.de>
Committed to 2018.02.x and 2018.08.x, thanks.
Bye, Peter Korsgaard
More information about the buildroot