ELBA-2019-3058

ELBA-2019-3058 - libreswan bug fix update

Type:	BUG
Impact:	NA
Release Date:	2019-10-16

Description

[3.25-8.1.0.1]
- add libreswan-oracle.patch to detect Oracle Linux distro

[3.25-8.1]
- Resolves: rhbz#1746052 libreswan: XFRM policy for OE/32 peer is deleted when shunts for previous half-open state expire [rhel-7.7.z]

[3.25-8]
- Resolves: rhbz#1686991 IKEv1 traffic interruption when responder deletes SAs 60 seconds before EVENT_SA_REPLACE

[3.25-7]
- Resolves: rhbz#1673105 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart

[3.25-6]
- Resolves: rhbz#1630355 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N [updated]
- Resolves: rhbz#1679735 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure

[3.25-5]
- Resolves: rhbz#1639404 Unable to verify certificate with non-empty Extended Key Usage which does not include serverAuth or clientAuth
- Resolves: rhbz#1630355 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N
- Resolves: rhbz#1629902 libreswan assertion failed when OAKLEY_KEY_LENGTH is zero for IKE using AES_CBC
- Resolves: rhbz#1623279 [abrt] [faf] libreswan: strncpy(): /usr/libexec/ipsec/pluto killed by 11
- Resolves: rhbz#1625303 config: recursive include check doesn't work
- Resolves: rhbz#1664521 libreswan 3.25 in FIPS mode is incorrectly rejecting X.509 public keys that are >= 3072 bits

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	libreswan-3.25-8.1.0.1.el7_7.src.rpm	8cbb66149f1848323d59e77a30c64acea1cca45c93129ebf75ba3ec97f399fd7	ELBA-2021-9558	ol7_aarch64_beta
	libreswan-3.25-8.1.0.1.el7_7.src.rpm	8cbb66149f1848323d59e77a30c64acea1cca45c93129ebf75ba3ec97f399fd7	ELBA-2021-9558	ol7_aarch64_latest
	libreswan-3.25-8.1.0.1.el7_7.src.rpm	8cbb66149f1848323d59e77a30c64acea1cca45c93129ebf75ba3ec97f399fd7	ELBA-2021-9558	ol7_aarch64_u7_patch
	libreswan-3.25-8.1.0.1.el7_7.src.rpm	8cbb66149f1848323d59e77a30c64acea1cca45c93129ebf75ba3ec97f399fd7	ELBA-2021-9558	ol7_aarch64_u8_base
	libreswan-3.25-8.1.0.1.el7_7.src.rpm	8cbb66149f1848323d59e77a30c64acea1cca45c93129ebf75ba3ec97f399fd7	ELBA-2021-9558	ol7_aarch64_u9_base
	libreswan-3.25-8.1.0.1.el7_7.aarch64.rpm	2d0b23ba15b56b6c7902933161e49dd7d1487088b41da55e8a485f1fd857d2d3	ELBA-2021-9558	ol7_aarch64_beta
	libreswan-3.25-8.1.0.1.el7_7.aarch64.rpm	2d0b23ba15b56b6c7902933161e49dd7d1487088b41da55e8a485f1fd857d2d3	ELBA-2021-9558	ol7_aarch64_latest
	libreswan-3.25-8.1.0.1.el7_7.aarch64.rpm	2d0b23ba15b56b6c7902933161e49dd7d1487088b41da55e8a485f1fd857d2d3	ELBA-2021-9558	ol7_aarch64_u7_patch
	libreswan-3.25-8.1.0.1.el7_7.aarch64.rpm	2d0b23ba15b56b6c7902933161e49dd7d1487088b41da55e8a485f1fd857d2d3	ELBA-2021-9558	ol7_aarch64_u8_base
	libreswan-3.25-8.1.0.1.el7_7.aarch64.rpm	2d0b23ba15b56b6c7902933161e49dd7d1487088b41da55e8a485f1fd857d2d3	ELBA-2021-9558	ol7_aarch64_u9_base
Oracle Linux 7 (x86_64)	libreswan-3.25-8.1.0.1.el7_7.src.rpm	8cbb66149f1848323d59e77a30c64acea1cca45c93129ebf75ba3ec97f399fd7	ELBA-2021-9558	ol7_x86_64_beta
	libreswan-3.25-8.1.0.1.el7_7.src.rpm	8cbb66149f1848323d59e77a30c64acea1cca45c93129ebf75ba3ec97f399fd7	ELBA-2021-9558	ol7_x86_64_latest
	libreswan-3.25-8.1.0.1.el7_7.src.rpm	8cbb66149f1848323d59e77a30c64acea1cca45c93129ebf75ba3ec97f399fd7	ELBA-2021-9558	ol7_x86_64_u7_patch
	libreswan-3.25-8.1.0.1.el7_7.src.rpm	8cbb66149f1848323d59e77a30c64acea1cca45c93129ebf75ba3ec97f399fd7	ELBA-2021-9558	ol7_x86_64_u8_base
	libreswan-3.25-8.1.0.1.el7_7.src.rpm	8cbb66149f1848323d59e77a30c64acea1cca45c93129ebf75ba3ec97f399fd7	ELBA-2021-9558	ol7_x86_64_u9_base
	libreswan-3.25-8.1.0.1.el7_7.x86_64.rpm	5a3c78a927f660c2e96c8d3ef03c5a81b1ac2f2f6c064b2cc9082f6b6f2981f5	ELBA-2021-9558	ol7_x86_64_beta
	libreswan-3.25-8.1.0.1.el7_7.x86_64.rpm	5a3c78a927f660c2e96c8d3ef03c5a81b1ac2f2f6c064b2cc9082f6b6f2981f5	ELBA-2021-9558	ol7_x86_64_latest
	libreswan-3.25-8.1.0.1.el7_7.x86_64.rpm	5a3c78a927f660c2e96c8d3ef03c5a81b1ac2f2f6c064b2cc9082f6b6f2981f5	ELBA-2021-9558	ol7_x86_64_u7_patch
	libreswan-3.25-8.1.0.1.el7_7.x86_64.rpm	5a3c78a927f660c2e96c8d3ef03c5a81b1ac2f2f6c064b2cc9082f6b6f2981f5	ELBA-2021-9558	ol7_x86_64_u8_base
	libreswan-3.25-8.1.0.1.el7_7.x86_64.rpm	5a3c78a927f660c2e96c8d3ef03c5a81b1ac2f2f6c064b2cc9082f6b6f2981f5	ELBA-2021-9558	ol7_x86_64_u9_base

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team