ELSA-2015-1979 - libreswan security and enhancement update
| Type: | SECURITY |
| Impact: | MODERATE |
| Release Date: | 2015-11-03 |
Description
[3.15-5.0.1]
- add libreswan-oracle.patch to detect Oracle Linux distro
[3.15-5]
- Resolves: rhbz#1273719 libreswan FIPS test mistakenly looks for non-existent file hashes
[3.15-4]
- Resolves: rhbz#1268775 libreswan should support strictcrlpolicy alias
- Resolves: rhbz#1268776 Pluto crashes after stop when I use floating ip address
- Resolves: rhbz#1268773 Pluto crashes on INITIATOR site during 'service ipsec stop'
- Resolves: rhbz#1208022 libreswan ignores module blacklist rules
- Resolves: rhbz#1270673 ipsec does not work properly on loopback
[3.15-2]
- Resolves: rhbz#1259208 CVE-2015-3240
- Merge rhel6 and rhel7 spec into one
- Be lenient for racoon padding behaviour
- Fix seedev option to /dev/random
- Some IKEv1 PAM methods always gave 'Permission denied'
- Parser workarounds for differences in gcc/flex/bison on rhel6/rhel7
- Parser fix to allow specifying time without unit (openswan compat)
- Fix Labeled IPsec on rekeyed IPsec SA's
- Workaround for wrong padding by racoon2
- Disable NSS HW GCM to workaround rhel6 xen builers bug
Related CVEs
Updated Packages
| Release/Architecture | Filename | sha256 | Superseded By Advisory | Channel Label |
|
| Oracle Linux 7 (x86_64) | libreswan-3.15-5.0.1.el7_1.src.rpm | 947d99a30428e4779684f29642d3f90408855ac55bd298968d58360179e01781 | ELBA-2021-9558 | ol7_x86_64_latest_archive |
| libreswan-3.15-5.0.1.el7_1.src.rpm | 947d99a30428e4779684f29642d3f90408855ac55bd298968d58360179e01781 | ELBA-2021-9558 | ol7_x86_64_u1_patch |
| libreswan-3.15-5.0.1.el7_1.x86_64.rpm | 9e7ad50aa1e3f9d0477cf4065dbc780c810308d1a9c0216af60ae697ad5ccb78 | ELBA-2021-9558 | ol7_x86_64_latest_archive |
| libreswan-3.15-5.0.1.el7_1.x86_64.rpm | 9e7ad50aa1e3f9d0477cf4065dbc780c810308d1a9c0216af60ae697ad5ccb78 | ELBA-2021-9558 | ol7_x86_64_u1_patch |
This page is generated automatically and has not been checked for errors or omissions. For clarification
or corrections please contact the Oracle Linux ULN team
