ELSA-2015-1979 - libreswan security and enhancement update
| Type: | SECURITY |
| Severity: | MODERATE |
| Release Date: | 2015-11-03 |
Description
[3.15-5.0.1]
- add libreswan-oracle.patch to detect Oracle Linux distro
[3.15-5]
- Resolves: rhbz#1273719 libreswan FIPS test mistakenly looks for non-existent file hashes
[3.15-4]
- Resolves: rhbz#1268775 libreswan should support strictcrlpolicy alias
- Resolves: rhbz#1268776 Pluto crashes after stop when I use floating ip address
- Resolves: rhbz#1268773 Pluto crashes on INITIATOR site during 'service ipsec stop'
- Resolves: rhbz#1208022 libreswan ignores module blacklist rules
- Resolves: rhbz#1270673 ipsec does not work properly on loopback
[3.15-2]
- Resolves: rhbz#1259208 CVE-2015-3240
- Merge rhel6 and rhel7 spec into one
- Be lenient for racoon padding behaviour
- Fix seedev option to /dev/random
- Some IKEv1 PAM methods always gave 'Permission denied'
- Parser workarounds for differences in gcc/flex/bison on rhel6/rhel7
- Parser fix to allow specifying time without unit (openswan compat)
- Fix Labeled IPsec on rekeyed IPsec SA's
- Workaround for wrong padding by racoon2
- Disable NSS HW GCM to workaround rhel6 xen builers bug
Related CVEs
Updated Packages
| Release/Architecture | Filename | MD5sum | Superseded By Advisory |
|
| Oracle Linux 7 (x86_64) | libreswan-3.15-5.0.1.el7_1.src.rpm | 6b9bdd3d6020b7e8ce915d05fd1bad94 | ELBA-2020-4067 |
| libreswan-3.15-5.0.1.el7_1.x86_64.rpm | ca4fd56da0ad2bbbbb179a76c0c34c98 | ELBA-2020-4067 |
This page is generated automatically and has not been checked for errors or omissions. For clarification
or corrections please contact the Oracle Linux ULN team
