- Issued:
- 2013-11-20
- Updated:
- 2013-11-20
RHBA-2013:1718 - Bug Fix Advisory
Synopsis
openswan bug fix and enhancement update
Type/Severity
Bug Fix Advisory
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
Topic
Updated openswan packages that fix several bugs and add various enhancements are
now available for Red Hat Enterprise Linux 6.
Description
Openswan is a free implementation of Internet Protocol Security (IPsec) and
Internet Key Exchange (IKE). IPsec uses strong cryptography to provide both
authentication and encryption services. These services allow you to build secure
tunnels through untrusted networks.
These updated openswan packages include numerous bug fixes and enhancements.
Space precludes documenting all of these changes in this advisory. Users are
directed to the Red Hat Enterprise Linux 6.5 Technical Notes for information on
the most significant of these changes:
All openswan users are advised to upgrade to these updated packages, which fix
these bugs and add this enhancement.
Solution
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/site/articles/11258
Affected Products
- Red Hat Enterprise Linux Server 6 x86_64
- Red Hat Enterprise Linux Server 6 i386
- Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
- Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
- Red Hat Enterprise Linux Workstation 6 x86_64
- Red Hat Enterprise Linux Workstation 6 i386
- Red Hat Enterprise Linux Desktop 6 x86_64
- Red Hat Enterprise Linux Desktop 6 i386
- Red Hat Enterprise Linux for IBM z Systems 6 s390x
- Red Hat Enterprise Linux for Power, big endian 6 ppc64
- Red Hat Enterprise Linux Server from RHUI 6 x86_64
- Red Hat Enterprise Linux Server from RHUI 6 i386
- Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
- Red Hat Enterprise Linux Server - Retired Extended Life Cycle Support 6 x86_64
Fixes
- BZ - 747966 - Missing else keyword (openswan)
- BZ - 796683 - Compile with -fno-strict-aliasing to avoid possible run-time errors
- BZ - 868986 - rightid= can be ignored when a peer certificate name field contains a comma
- BZ - 881914 - openswan doesn't support SHA2 certificates
- BZ - 957400 - openswan does not load the aesni_intel kernel module
- BZ - 959566 - fix ipsec ikeping warnings
- BZ - 959568 - Allow disabling of NAT-T keepalive packets
- BZ - 963833 - Abort pluto on crypto failure to prevent plaintext / nonce leaks
- BZ - 998587 - underspecific build requires
- BZ - 1002312 - IKEv2 skeyseed calculation only succeeds because of unspecified compiler behaviour
- BZ - 1014009 - pluto fails to start in default configuration
- BZ - 1017371 - Verification of openswan package fails
CVEs
(none)
Red Hat Enterprise Linux Server 6
SRPM | |
---|---|
openswan-2.6.32-27.el6.src.rpm | SHA-256: f12e92fcd3f6570490cff9ab866342c1c309a2c33f4bd33fbc1b3d771228e0f3 |
x86_64 | |
openswan-2.6.32-27.el6.x86_64.rpm | SHA-256: 8101e953117a3889a12360a9f1a8bbd9aa18feea54d81c4e6a15889148fe09f9 |
openswan-debuginfo-2.6.32-27.el6.x86_64.rpm | SHA-256: 00bc1e961fbf572fa5e6506a5f30b284cdc4ce1eed224912245c7f5377c2cd4e |
openswan-debuginfo-2.6.32-27.el6.x86_64.rpm | SHA-256: 00bc1e961fbf572fa5e6506a5f30b284cdc4ce1eed224912245c7f5377c2cd4e |
openswan-doc-2.6.32-27.el6.x86_64.rpm | SHA-256: cecc30d2efae984e50999fc431182da6299b1170d78dc3f5b70d03418639abc8 |
i386 | |
openswan-2.6.32-27.el6.i686.rpm | SHA-256: 20625ca6377ac531aad91d43c67164ac417b22b2fac5129a5097950bfa9ec18e |
openswan-debuginfo-2.6.32-27.el6.i686.rpm | SHA-256: 2839155856b74f83ac5de2547df6b8be999be91c137dbb44ed03279edea27aa6 |
openswan-debuginfo-2.6.32-27.el6.i686.rpm | SHA-256: 2839155856b74f83ac5de2547df6b8be999be91c137dbb44ed03279edea27aa6 |
openswan-doc-2.6.32-27.el6.i686.rpm | SHA-256: 2b2e5adcea5ff53d83737ddc044241a51eaf39ed3adee675684d3ec836d7667f |
Red Hat Enterprise Linux Workstation 6
SRPM | |
---|---|
openswan-2.6.32-27.el6.src.rpm | SHA-256: f12e92fcd3f6570490cff9ab866342c1c309a2c33f4bd33fbc1b3d771228e0f3 |
x86_64 | |
openswan-2.6.32-27.el6.x86_64.rpm | SHA-256: 8101e953117a3889a12360a9f1a8bbd9aa18feea54d81c4e6a15889148fe09f9 |
openswan-debuginfo-2.6.32-27.el6.x86_64.rpm | SHA-256: 00bc1e961fbf572fa5e6506a5f30b284cdc4ce1eed224912245c7f5377c2cd4e |
openswan-debuginfo-2.6.32-27.el6.x86_64.rpm | SHA-256: 00bc1e961fbf572fa5e6506a5f30b284cdc4ce1eed224912245c7f5377c2cd4e |
openswan-doc-2.6.32-27.el6.x86_64.rpm | SHA-256: cecc30d2efae984e50999fc431182da6299b1170d78dc3f5b70d03418639abc8 |
i386 | |
openswan-2.6.32-27.el6.i686.rpm | SHA-256: 20625ca6377ac531aad91d43c67164ac417b22b2fac5129a5097950bfa9ec18e |
openswan-debuginfo-2.6.32-27.el6.i686.rpm | SHA-256: 2839155856b74f83ac5de2547df6b8be999be91c137dbb44ed03279edea27aa6 |
openswan-debuginfo-2.6.32-27.el6.i686.rpm | SHA-256: 2839155856b74f83ac5de2547df6b8be999be91c137dbb44ed03279edea27aa6 |
openswan-doc-2.6.32-27.el6.i686.rpm | SHA-256: 2b2e5adcea5ff53d83737ddc044241a51eaf39ed3adee675684d3ec836d7667f |
Red Hat Enterprise Linux Desktop 6
SRPM | |
---|---|
openswan-2.6.32-27.el6.src.rpm | SHA-256: f12e92fcd3f6570490cff9ab866342c1c309a2c33f4bd33fbc1b3d771228e0f3 |
i386 | |
openswan-2.6.32-27.el6.i686.rpm | SHA-256: 20625ca6377ac531aad91d43c67164ac417b22b2fac5129a5097950bfa9ec18e |
openswan-debuginfo-2.6.32-27.el6.i686.rpm | SHA-256: 2839155856b74f83ac5de2547df6b8be999be91c137dbb44ed03279edea27aa6 |
openswan-debuginfo-2.6.32-27.el6.i686.rpm | SHA-256: 2839155856b74f83ac5de2547df6b8be999be91c137dbb44ed03279edea27aa6 |
openswan-doc-2.6.32-27.el6.i686.rpm | SHA-256: 2b2e5adcea5ff53d83737ddc044241a51eaf39ed3adee675684d3ec836d7667f |
x86_64 | |
openswan-2.6.32-27.el6.x86_64.rpm | SHA-256: 8101e953117a3889a12360a9f1a8bbd9aa18feea54d81c4e6a15889148fe09f9 |
openswan-debuginfo-2.6.32-27.el6.x86_64.rpm | SHA-256: 00bc1e961fbf572fa5e6506a5f30b284cdc4ce1eed224912245c7f5377c2cd4e |
openswan-debuginfo-2.6.32-27.el6.x86_64.rpm | SHA-256: 00bc1e961fbf572fa5e6506a5f30b284cdc4ce1eed224912245c7f5377c2cd4e |
openswan-doc-2.6.32-27.el6.x86_64.rpm | SHA-256: cecc30d2efae984e50999fc431182da6299b1170d78dc3f5b70d03418639abc8 |
Red Hat Enterprise Linux for IBM z Systems 6
SRPM | |
---|---|
openswan-2.6.32-27.el6.src.rpm | SHA-256: f12e92fcd3f6570490cff9ab866342c1c309a2c33f4bd33fbc1b3d771228e0f3 |
s390x | |
openswan-2.6.32-27.el6.s390x.rpm | SHA-256: 54d5bc5352990c3c09ecf2ceaa2147ad7d8d123748b9f08debbebe9372c981b9 |
openswan-debuginfo-2.6.32-27.el6.s390x.rpm | SHA-256: db553d5dbb86d2d958359cb494adbfabf5d7964822989f2a3e51552257e7f298 |
openswan-debuginfo-2.6.32-27.el6.s390x.rpm | SHA-256: db553d5dbb86d2d958359cb494adbfabf5d7964822989f2a3e51552257e7f298 |
openswan-doc-2.6.32-27.el6.s390x.rpm | SHA-256: 0b0595031e0af83603f2929cf4949e4baf01ffe22849a434b3bc0f56dde2a029 |
Red Hat Enterprise Linux for Power, big endian 6
SRPM | |
---|---|
openswan-2.6.32-27.el6.src.rpm | SHA-256: f12e92fcd3f6570490cff9ab866342c1c309a2c33f4bd33fbc1b3d771228e0f3 |
ppc64 | |
openswan-2.6.32-27.el6.ppc64.rpm | SHA-256: e9a6cd57cadc5a4bb6474977d423a687e4b595699703fc36c013eb88b057bf60 |
openswan-debuginfo-2.6.32-27.el6.ppc64.rpm | SHA-256: d31b6a245330c90b3276cc9a9cc7816ec08339810cc898ff902db08602b3b1f1 |
openswan-debuginfo-2.6.32-27.el6.ppc64.rpm | SHA-256: d31b6a245330c90b3276cc9a9cc7816ec08339810cc898ff902db08602b3b1f1 |
openswan-doc-2.6.32-27.el6.ppc64.rpm | SHA-256: 182277201f2d7ac11fd3fe3296f7b46377d229e508ab075ecd9c4fe73ec967cf |
Red Hat Enterprise Linux Server from RHUI 6
SRPM | |
---|---|
openswan-2.6.32-27.el6.src.rpm | SHA-256: f12e92fcd3f6570490cff9ab866342c1c309a2c33f4bd33fbc1b3d771228e0f3 |
x86_64 | |
openswan-2.6.32-27.el6.x86_64.rpm | SHA-256: 8101e953117a3889a12360a9f1a8bbd9aa18feea54d81c4e6a15889148fe09f9 |
openswan-debuginfo-2.6.32-27.el6.x86_64.rpm | SHA-256: 00bc1e961fbf572fa5e6506a5f30b284cdc4ce1eed224912245c7f5377c2cd4e |
openswan-debuginfo-2.6.32-27.el6.x86_64.rpm | SHA-256: 00bc1e961fbf572fa5e6506a5f30b284cdc4ce1eed224912245c7f5377c2cd4e |
openswan-doc-2.6.32-27.el6.x86_64.rpm | SHA-256: cecc30d2efae984e50999fc431182da6299b1170d78dc3f5b70d03418639abc8 |
i386 | |
openswan-2.6.32-27.el6.i686.rpm | SHA-256: 20625ca6377ac531aad91d43c67164ac417b22b2fac5129a5097950bfa9ec18e |
openswan-debuginfo-2.6.32-27.el6.i686.rpm | SHA-256: 2839155856b74f83ac5de2547df6b8be999be91c137dbb44ed03279edea27aa6 |
openswan-debuginfo-2.6.32-27.el6.i686.rpm | SHA-256: 2839155856b74f83ac5de2547df6b8be999be91c137dbb44ed03279edea27aa6 |
openswan-doc-2.6.32-27.el6.i686.rpm | SHA-256: 2b2e5adcea5ff53d83737ddc044241a51eaf39ed3adee675684d3ec836d7667f |
Red Hat Enterprise Linux Server - Extended Life Cycle Support 6
SRPM | |
---|---|
openswan-2.6.32-27.el6.src.rpm | SHA-256: f12e92fcd3f6570490cff9ab866342c1c309a2c33f4bd33fbc1b3d771228e0f3 |
x86_64 | |
openswan-2.6.32-27.el6.x86_64.rpm | SHA-256: 8101e953117a3889a12360a9f1a8bbd9aa18feea54d81c4e6a15889148fe09f9 |
openswan-debuginfo-2.6.32-27.el6.x86_64.rpm | SHA-256: 00bc1e961fbf572fa5e6506a5f30b284cdc4ce1eed224912245c7f5377c2cd4e |
openswan-debuginfo-2.6.32-27.el6.x86_64.rpm | SHA-256: 00bc1e961fbf572fa5e6506a5f30b284cdc4ce1eed224912245c7f5377c2cd4e |
openswan-doc-2.6.32-27.el6.x86_64.rpm | SHA-256: cecc30d2efae984e50999fc431182da6299b1170d78dc3f5b70d03418639abc8 |
i386 | |
openswan-2.6.32-27.el6.i686.rpm | SHA-256: 20625ca6377ac531aad91d43c67164ac417b22b2fac5129a5097950bfa9ec18e |
openswan-debuginfo-2.6.32-27.el6.i686.rpm | SHA-256: 2839155856b74f83ac5de2547df6b8be999be91c137dbb44ed03279edea27aa6 |
openswan-debuginfo-2.6.32-27.el6.i686.rpm | SHA-256: 2839155856b74f83ac5de2547df6b8be999be91c137dbb44ed03279edea27aa6 |
openswan-doc-2.6.32-27.el6.i686.rpm | SHA-256: 2b2e5adcea5ff53d83737ddc044241a51eaf39ed3adee675684d3ec836d7667f |
Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6
SRPM | |
---|---|
openswan-2.6.32-27.el6.src.rpm | SHA-256: f12e92fcd3f6570490cff9ab866342c1c309a2c33f4bd33fbc1b3d771228e0f3 |
s390x | |
openswan-2.6.32-27.el6.s390x.rpm | SHA-256: 54d5bc5352990c3c09ecf2ceaa2147ad7d8d123748b9f08debbebe9372c981b9 |
openswan-debuginfo-2.6.32-27.el6.s390x.rpm | SHA-256: db553d5dbb86d2d958359cb494adbfabf5d7964822989f2a3e51552257e7f298 |
openswan-debuginfo-2.6.32-27.el6.s390x.rpm | SHA-256: db553d5dbb86d2d958359cb494adbfabf5d7964822989f2a3e51552257e7f298 |
openswan-doc-2.6.32-27.el6.s390x.rpm | SHA-256: 0b0595031e0af83603f2929cf4949e4baf01ffe22849a434b3bc0f56dde2a029 |
Red Hat Enterprise Linux Server - Retired Extended Life Cycle Support 6
SRPM | |
---|---|
openswan-2.6.32-27.el6.src.rpm | SHA-256: f12e92fcd3f6570490cff9ab866342c1c309a2c33f4bd33fbc1b3d771228e0f3 |
x86_64 | |
openswan-2.6.32-27.el6.x86_64.rpm | SHA-256: 8101e953117a3889a12360a9f1a8bbd9aa18feea54d81c4e6a15889148fe09f9 |
openswan-debuginfo-2.6.32-27.el6.x86_64.rpm | SHA-256: 00bc1e961fbf572fa5e6506a5f30b284cdc4ce1eed224912245c7f5377c2cd4e |
openswan-debuginfo-2.6.32-27.el6.x86_64.rpm | SHA-256: 00bc1e961fbf572fa5e6506a5f30b284cdc4ce1eed224912245c7f5377c2cd4e |
openswan-doc-2.6.32-27.el6.x86_64.rpm | SHA-256: cecc30d2efae984e50999fc431182da6299b1170d78dc3f5b70d03418639abc8 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.