package/network-manager: Add upstream patch to fix CVE-2018-15688
authorBernd Kuhls <bernd.kuhls@t-online.de>
Tue, 30 Oct 2018 21:20:53 +0000 (22:20 +0100)
committerPeter Korsgaard <peter@korsgaard.com>
Tue, 30 Oct 2018 21:50:30 +0000 (22:50 +0100)
commit0a51ba655c6eed7a2a8be116b855259adbaf7bd6
tree6492986b5b861cf82d0f283ff5c0fb0338b63c22
parentb01f05e775187518c70c09b19e32d850647e4417
package/network-manager: Add upstream patch to fix CVE-2018-15688

NetworkManager includes some parts of the systemd-networkd code in its
codebase. That can be found at src/systemd/src/libsystemd-networkd.
The DHCP implementation provided by systemd-networkd is used when
NetworkManager is configured to use the internal implementation,
however the default is to use dhclient.

When NetworkManager is configured to use the internal dhcp and an
interface is setup with ipv6.method=auto (which is the default value)
or ipv6.method=dhcp, this flaw can be exploited. When using
ipv6.method=auto, the DHCPv6 client can be automatically started with a
Router Advertisement packet.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
package/network-manager/0001-dhcp6-make-sure-we-have-enough-space-for-the-DHCP6-o.patch [new file with mode: 0644]