- Issued:
- 2008-05-21
- Updated:
- 2008-05-21
RHBA-2008:0395 - Bug Fix Advisory
Synopsis
new package: openswan
Type/Severity
Bug Fix Advisory
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
Topic
A new openswan package is now available for Red Hat Enterprise Linux 5.
Description
Openswan is a free implementation of IPsec & IKE for Linux. IPsec stands
for Internet Protocol Security, and uses strong cryptography to provide
both authentication and encryption services. These services allow you to
build secure tunnels through untrusted networks. Everything passing through
the untrusted net is encrypted by the ipsec gateway machine and decrypted
by the gateway at the other end of the tunnel. The resulting tunnel is a
virtual private network, or VPN.
This package contains the daemons and userland tools for setting up
Openswan on Red Hat Enterprise Linux 5.
Openswan provides an alternative to the ipsec-tools package, and includes
additional functionality that users may find useful. Users of the
ipsec-tools package may wish to evaluate Openswan.
All users requiring openswan should install this newly-released package,
which adds this enhancement.
Solution
Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.
This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188
Affected Products
- Red Hat Enterprise Linux Server 5 x86_64
- Red Hat Enterprise Linux Server 5 ia64
- Red Hat Enterprise Linux Server 5 i386
- Red Hat Enterprise Linux Workstation 5 x86_64
- Red Hat Enterprise Linux Workstation 5 i386
- Red Hat Enterprise Linux Desktop 5 x86_64
- Red Hat Enterprise Linux Desktop 5 i386
- Red Hat Enterprise Linux for IBM z Systems 5 s390x
- Red Hat Enterprise Linux for Power, big endian 5 ppc
- Red Hat Enterprise Linux Server from RHUI 5 x86_64
- Red Hat Enterprise Linux Server from RHUI 5 i386
Fixes
- BZ - 432805 - ipsec restart does not work
- BZ - 432821 - left/rightsourceip tags not working
- BZ - 438826 - openswan IKEv2 hangs between intel and ppc64 machines
- BZ - 439985 - opeswan IKEv2 responder fails when encr=aes and dh=modp1024
- BZ - 441588 - [IPv6-DoD] openswan IKEv2 crashes when interoperating with racoon2
- BZ - 442333 - AVC denials on start of openswan host-to-host tunnel
CVEs
(none)
References
(none)
Red Hat Enterprise Linux Server 5
SRPM | |
---|---|
openswan-2.6.12-2.el5.src.rpm | SHA-256: bd61ae8ebbf37e1c9ff5a72ca916cc905aa0d58407ca6f659fcf509a2f7300ed |
x86_64 | |
openswan-2.6.12-2.el5.x86_64.rpm | SHA-256: e5a2c98983fafbcec2b412674a50c0d097a35361af8b5ead220bc2d0c0a91a42 |
openswan-doc-2.6.12-2.el5.x86_64.rpm | SHA-256: 34a3b152a5e948ef691a69028bdbf2a55020e117f6599af9b9ac03f157788bd7 |
ia64 | |
openswan-2.6.12-2.el5.ia64.rpm | SHA-256: 26a53152547bb23508eee4f26cd4bb0bb3fb7a67272d729ac0aab98498dcef29 |
openswan-doc-2.6.12-2.el5.ia64.rpm | SHA-256: ce6c2876ac0c2898b5c7a61b3969f028e33eb47ad955f7bf850be4be21495e43 |
i386 | |
openswan-2.6.12-2.el5.i386.rpm | SHA-256: ae86e0528f90c4c7c28fad3d13f58880a05cc95066371fcea9914c7c25dd162f |
openswan-doc-2.6.12-2.el5.i386.rpm | SHA-256: 0da229159ac57c6287b3fcc4bb597678c776a90bcbed9a87553dbca7fee03963 |
Red Hat Enterprise Linux Workstation 5
SRPM | |
---|---|
openswan-2.6.12-2.el5.src.rpm | SHA-256: bd61ae8ebbf37e1c9ff5a72ca916cc905aa0d58407ca6f659fcf509a2f7300ed |
x86_64 | |
openswan-2.6.12-2.el5.x86_64.rpm | SHA-256: e5a2c98983fafbcec2b412674a50c0d097a35361af8b5ead220bc2d0c0a91a42 |
openswan-doc-2.6.12-2.el5.x86_64.rpm | SHA-256: 34a3b152a5e948ef691a69028bdbf2a55020e117f6599af9b9ac03f157788bd7 |
i386 | |
openswan-2.6.12-2.el5.i386.rpm | SHA-256: ae86e0528f90c4c7c28fad3d13f58880a05cc95066371fcea9914c7c25dd162f |
openswan-doc-2.6.12-2.el5.i386.rpm | SHA-256: 0da229159ac57c6287b3fcc4bb597678c776a90bcbed9a87553dbca7fee03963 |
Red Hat Enterprise Linux Desktop 5
SRPM | |
---|---|
openswan-2.6.12-2.el5.src.rpm | SHA-256: bd61ae8ebbf37e1c9ff5a72ca916cc905aa0d58407ca6f659fcf509a2f7300ed |
x86_64 | |
openswan-2.6.12-2.el5.x86_64.rpm | SHA-256: e5a2c98983fafbcec2b412674a50c0d097a35361af8b5ead220bc2d0c0a91a42 |
openswan-doc-2.6.12-2.el5.x86_64.rpm | SHA-256: 34a3b152a5e948ef691a69028bdbf2a55020e117f6599af9b9ac03f157788bd7 |
i386 | |
openswan-2.6.12-2.el5.i386.rpm | SHA-256: ae86e0528f90c4c7c28fad3d13f58880a05cc95066371fcea9914c7c25dd162f |
openswan-doc-2.6.12-2.el5.i386.rpm | SHA-256: 0da229159ac57c6287b3fcc4bb597678c776a90bcbed9a87553dbca7fee03963 |
Red Hat Enterprise Linux for IBM z Systems 5
SRPM | |
---|---|
openswan-2.6.12-2.el5.src.rpm | SHA-256: bd61ae8ebbf37e1c9ff5a72ca916cc905aa0d58407ca6f659fcf509a2f7300ed |
s390x | |
openswan-2.6.12-2.el5.s390x.rpm | SHA-256: c5849d77c95f3715b3e710fbcfbd93b1ef329d11ef74fa77547871931b3b9e62 |
openswan-doc-2.6.12-2.el5.s390x.rpm | SHA-256: a21735d029df6477a16c7fa40f3ea48ba71ac4ab5e74479d82ed43646ac8aabc |
Red Hat Enterprise Linux for Power, big endian 5
SRPM | |
---|---|
openswan-2.6.12-2.el5.src.rpm | SHA-256: bd61ae8ebbf37e1c9ff5a72ca916cc905aa0d58407ca6f659fcf509a2f7300ed |
ppc | |
openswan-2.6.12-2.el5.ppc.rpm | SHA-256: cd73aa31bcf274a9ac384889ac9fad70a460a99a0d9f541fca5621e3360544be |
openswan-doc-2.6.12-2.el5.ppc.rpm | SHA-256: 8b50de9d1997325153f2e1d75632b226cdb521b60a91be9095906855511658c0 |
Red Hat Enterprise Linux Server from RHUI 5
SRPM | |
---|---|
openswan-2.6.12-2.el5.src.rpm | SHA-256: bd61ae8ebbf37e1c9ff5a72ca916cc905aa0d58407ca6f659fcf509a2f7300ed |
x86_64 | |
openswan-2.6.12-2.el5.x86_64.rpm | SHA-256: e5a2c98983fafbcec2b412674a50c0d097a35361af8b5ead220bc2d0c0a91a42 |
openswan-doc-2.6.12-2.el5.x86_64.rpm | SHA-256: 34a3b152a5e948ef691a69028bdbf2a55020e117f6599af9b9ac03f157788bd7 |
i386 | |
openswan-2.6.12-2.el5.i386.rpm | SHA-256: ae86e0528f90c4c7c28fad3d13f58880a05cc95066371fcea9914c7c25dd162f |
openswan-doc-2.6.12-2.el5.i386.rpm | SHA-256: 0da229159ac57c6287b3fcc4bb597678c776a90bcbed9a87553dbca7fee03963 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.