ELBA-2019-3058

ELBA-2019-3058 - libreswan bug fix update

Type:BUG
Severity:NA
Release Date:2019-10-16

Description


[3.25-8.1.0.1]
- add libreswan-oracle.patch to detect Oracle Linux distro

[3.25-8.1]
- Resolves: rhbz#1746052 libreswan: XFRM policy for OE/32 peer is deleted when shunts for previous half-open state expire [rhel-7.7.z]

[3.25-8]
- Resolves: rhbz#1686991 IKEv1 traffic interruption when responder deletes SAs 60 seconds before EVENT_SA_REPLACE

[3.25-7]
- Resolves: rhbz#1673105 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart

[3.25-6]
- Resolves: rhbz#1630355 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N [updated]
- Resolves: rhbz#1679735 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure

[3.25-5]
- Resolves: rhbz#1639404 Unable to verify certificate with non-empty Extended Key Usage which does not include serverAuth or clientAuth
- Resolves: rhbz#1630355 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N
- Resolves: rhbz#1629902 libreswan assertion failed when OAKLEY_KEY_LENGTH is zero for IKE using AES_CBC
- Resolves: rhbz#1623279 [abrt] [faf] libreswan: strncpy(): /usr/libexec/ipsec/pluto killed by 11
- Resolves: rhbz#1625303 config: recursive include check doesn't work
- Resolves: rhbz#1664521 libreswan 3.25 in FIPS mode is incorrectly rejecting X.509 public keys that are >= 3072 bits




Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By Advisory
Oracle Linux 7 (aarch64) libreswan-3.25-8.1.0.1.el7_7.src.rpmdcba31eb56c355ad7262bc066d9b5674-
libreswan-3.25-8.1.0.1.el7_7.aarch64.rpmf2f4b059b05afff276530bf10efcbb39-
Oracle Linux 7 (x86_64) libreswan-3.25-8.1.0.1.el7_7.src.rpmdcba31eb56c355ad7262bc066d9b5674-
libreswan-3.25-8.1.0.1.el7_7.x86_64.rpm89b77fd6f86d15111fcd45ea7055d359-



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete