ELSA-2007-0342

ELSA-2007-0342 - Moderate: ipsec-tools security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2007-06-26

Description

[0.6.5-8]
- Upstream fix for Racoon DOS, informational delete must be encrypted
- Resolves: rhbz#235388 - CVE-2007-1841 ipsec-tools racoon DoS

[0.6.5-7]
- Resolves: #218386 labeled ipsec does not work over loopback

[0.6.5-6.6]
- Related: #232508 add auditing to racoon

[0.6.5-6.5]
- Resolves: #235680 racoon socket descriptor exhaustion

[0.6.5-6.4]
- Resolves: #236121 increase buffer for context

[0.6.5-6.3]
- Resolves: #234491 kernel sends ACQUIRES that racoon is not catching
- Resolves: #218386 labeled ipsec does not work over loopback


[0.6.5-6.2.el5]
- fix for setting the security context into a proposal (32<->64bit)
- Resolves: rhbz#232508

Related CVEs

CVE-2007-1841

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 5 (i386)	ipsec-tools-0.6.5-8.el5.src.rpm	0fdaa19e0d97f11b811bb41098e028d78fc496c2d4be1c34eeadfabf80e5a169	ELBA-2012-1249	el5_ga_i386_patch
	ipsec-tools-0.6.5-8.el5.src.rpm	0fdaa19e0d97f11b811bb41098e028d78fc496c2d4be1c34eeadfabf80e5a169	ELBA-2012-1249	el5_u1_i386_base
	ipsec-tools-0.6.5-8.el5.i386.rpm	bf1c22c51643803a284bcac412b0edcb1d5b83f596f0f3618e356f5198814624	ELBA-2012-1249	el5_ga_i386_patch
	ipsec-tools-0.6.5-8.el5.i386.rpm	bf1c22c51643803a284bcac412b0edcb1d5b83f596f0f3618e356f5198814624	ELBA-2012-1249	el5_u1_i386_base
Oracle Linux 5 (x86_64)	ipsec-tools-0.6.5-8.el5.src.rpm	0fdaa19e0d97f11b811bb41098e028d78fc496c2d4be1c34eeadfabf80e5a169	ELBA-2012-1249	el5_ga_x86_64_patch
	ipsec-tools-0.6.5-8.el5.src.rpm	0fdaa19e0d97f11b811bb41098e028d78fc496c2d4be1c34eeadfabf80e5a169	ELBA-2012-1249	el5_u1_x86_64_base
	ipsec-tools-0.6.5-8.el5.x86_64.rpm	184093aa857903eb07543e959c3afd87a9782a271503dd8deacc9f9765589b7a	ELBA-2012-1249	el5_ga_x86_64_patch
	ipsec-tools-0.6.5-8.el5.x86_64.rpm	184093aa857903eb07543e959c3afd87a9782a271503dd8deacc9f9765589b7a	ELBA-2012-1249	el5_u1_x86_64_base

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team