Skip to navigation Skip to main content

Utilities

  • Subscriptions
  • Downloads
  • Containers
  • Support Cases
Red Hat Customer Portal
  • Subscriptions
  • Downloads
  • Containers
  • Support Cases
  • Products & Services

    Products

    Support

    • Production Support
    • Development Support
    • Product Life Cycles

    Services

    • Consulting
    • Technical Account Management
    • Training & Certifications

    Documentation

    • Red Hat Enterprise Linux
    • Red Hat JBoss Enterprise Application Platform
    • Red Hat OpenStack Platform
    • Red Hat OpenShift Container Platform
    All Documentation

    Ecosystem Catalog

    • Red Hat Partner Ecosystem
    • Partner Resources
  • Tools

    Tools

    • Troubleshoot a product issue
    • Packages
    • Errata

    Customer Portal Labs

    • Configuration
    • Deployment
    • Security
    • Troubleshoot
    All labs

    Red Hat Insights

    Increase visibility into IT operations to detect and resolve technical issues before they impact your business.

    Learn More
    Go to Insights
  • Security

    Red Hat Product Security Center

    Engage with our Red Hat Product Security team, access security updates, and ensure your environments are not exposed to any known security vulnerabilities.

    Product Security Center

    Security Updates

    • Security Advisories
    • Red Hat CVE Database
    • Security Labs

    Keep your systems secure with Red Hat's specialized responses to security vulnerabilities.

    View Responses

    Resources

    • Security Blog
    • Security Measurement
    • Severity Ratings
    • Backporting Policies
    • Product Signing (GPG) Keys
  • Community

    Customer Portal Community

    • Discussions
    • Private Groups
    Community Activity

    Customer Events

    • Red Hat Convergence
    • Red Hat Summit

    Stories

    • Red Hat Subscription Value
    • You Asked. We Acted.
    • Open Source Communities
Or troubleshoot an issue.

Select Your Language

  • English
  • 한국어
  • 日本語
  • 中文 (中国)

Infrastructure and Management

  • Red Hat Enterprise Linux
  • Red Hat Satellite
  • Red Hat Subscription Management
  • Red Hat Insights
  • Red Hat Ansible Automation Platform

Cloud Computing

  • Red Hat OpenShift
  • Red Hat OpenStack Platform
  • Red Hat OpenShift Container Platform
  • Red Hat OpenShift Data Science
  • Red Hat OpenShift Dedicated
  • Red Hat Advanced Cluster Security for Kubernetes
  • Red Hat Advanced Cluster Management for Kubernetes
  • Red Hat Quay
  • Red Hat CodeReady Workspaces
  • Red Hat OpenShift Service on AWS

Storage

  • Red Hat Gluster Storage
  • Red Hat Hyperconverged Infrastructure
  • Red Hat Ceph Storage
  • Red Hat OpenShift Data Foundation

Runtimes

  • Red Hat Runtimes
  • Red Hat JBoss Enterprise Application Platform
  • Red Hat Data Grid
  • Red Hat JBoss Web Server
  • Red Hat Single Sign On
  • Red Hat support for Spring Boot
  • Red Hat build of Node.js
  • Red Hat build of Quarkus

Integration and Automation

  • Red Hat Fuse
  • Red Hat AMQ
  • Red Hat Application Foundations
  • Red Hat 3scale API Management
All Products
Red Hat Product Errata RHBA-2012:1305 - Bug Fix Advisory
Issued:
2012-09-24
Updated:
2012-09-24

RHBA-2012:1305 - Bug Fix Advisory

  • Overview
  • Updated Packages

Synopsis

openswan bug fix update

Type/Severity

Bug Fix Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Updated openswan packages that fix a bug are now available for Red Hat
Enterprise Linux 6.

Description

Openswan is a free implementation of IPsec (Internet Protocol Security) and IKE
(Internet Key Exchange) for Linux. The openswan packages contain daemons and
user-space tools for setting up Openswan. It supports the NETKEY/XFRM IPsec
kernel stack that exists in the default Linux kernel. Openswan 2.6 and later
also supports IKEv2 (Internet Key Exchange Protocol version 2), which is defined
in RFC5996.

This update fixes the following bug:

  • When a tunnel was established between two IPsec hosts (say host1 and host2)

utilizing DPD (Dead Peer Detection), and if host2 went offline while host1
continued to transmit data, host1 continually queued multiple phase 2 requests
after the DPD action. When host2 came back online, the stack of pending phase 2
requests was established, leaving a new IPsec SA (Security Association), and a
large group of extra SA's that consumed system resources and eventually expired.
This update ensures that openswan has just a single pending phase 2 request
during the time that host2 is down, and when host2 comes back up, only a single
new IPsec SA is established, thus preventing this bug. (BZ#852454)

All users of openswan are advised to upgrade to these updated packages, which
fix this bug.

Solution

Before applying this update, make sure all previously-released errata relevant
to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red
Hat Network to apply this update are available at
https://access.redhat.com/knowledge/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 6 x86_64
  • Red Hat Enterprise Linux Server 6 i386
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.3 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.3 i386
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
  • Red Hat Enterprise Linux Workstation 6 x86_64
  • Red Hat Enterprise Linux Workstation 6 i386
  • Red Hat Enterprise Linux Desktop 6 x86_64
  • Red Hat Enterprise Linux Desktop 6 i386
  • Red Hat Enterprise Linux for IBM z Systems 6 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 6.3 s390x
  • Red Hat Enterprise Linux for Power, big endian 6 ppc64
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 6.3 ppc64
  • Red Hat Enterprise Linux Server from RHUI 6 x86_64
  • Red Hat Enterprise Linux Server from RHUI 6 i386
  • Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.3 x86_64
  • Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.3 i386
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x

Fixes

(none)

CVEs

(none)

References

(none)

Note: More recent versions of these packages may be available. Click a package name for more details.

Red Hat Enterprise Linux Server 6

SRPM
openswan-2.6.32-19.el6_3.src.rpm SHA-256: 6a8f96aad1e7d4147d89a75638a6b5b81cbff303f83ac22d45d61af462f581ef
x86_64
openswan-2.6.32-19.el6_3.x86_64.rpm SHA-256: fc251c095b159dab56b37dce7c096b2682f7e285db8a9ece52b9e49d8cbf9004
openswan-debuginfo-2.6.32-19.el6_3.x86_64.rpm SHA-256: 7be1e951493c9bd908a1c1c50883d8117c0e4731aa6c893f4f0c96437e4c7b4a
openswan-debuginfo-2.6.32-19.el6_3.x86_64.rpm SHA-256: 7be1e951493c9bd908a1c1c50883d8117c0e4731aa6c893f4f0c96437e4c7b4a
openswan-doc-2.6.32-19.el6_3.x86_64.rpm SHA-256: 0452edbc3a1b9a32e45187c188f5d4e7fa0c6a5c7e0e3c6562c076dde19d2cb4
i386
openswan-2.6.32-19.el6_3.i686.rpm SHA-256: 02deefd2ab19a440da74992fa03ae1de7e9a2dd017fc42257981027ade0a7206
openswan-debuginfo-2.6.32-19.el6_3.i686.rpm SHA-256: b0fc2ddae918b59e5a5d53de3429cd695fbd451623aa490e4bcf0623a2043c29
openswan-debuginfo-2.6.32-19.el6_3.i686.rpm SHA-256: b0fc2ddae918b59e5a5d53de3429cd695fbd451623aa490e4bcf0623a2043c29
openswan-doc-2.6.32-19.el6_3.i686.rpm SHA-256: dbe53ad2b3da095528e442686176f939d3b30e4bd7d561ce21e4e33d236b7786

Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.3

SRPM
openswan-2.6.32-19.el6_3.src.rpm SHA-256: 6a8f96aad1e7d4147d89a75638a6b5b81cbff303f83ac22d45d61af462f581ef
x86_64
openswan-2.6.32-19.el6_3.x86_64.rpm SHA-256: fc251c095b159dab56b37dce7c096b2682f7e285db8a9ece52b9e49d8cbf9004
openswan-debuginfo-2.6.32-19.el6_3.x86_64.rpm SHA-256: 7be1e951493c9bd908a1c1c50883d8117c0e4731aa6c893f4f0c96437e4c7b4a
openswan-debuginfo-2.6.32-19.el6_3.x86_64.rpm SHA-256: 7be1e951493c9bd908a1c1c50883d8117c0e4731aa6c893f4f0c96437e4c7b4a
openswan-doc-2.6.32-19.el6_3.x86_64.rpm SHA-256: 0452edbc3a1b9a32e45187c188f5d4e7fa0c6a5c7e0e3c6562c076dde19d2cb4
i386
openswan-2.6.32-19.el6_3.i686.rpm SHA-256: 02deefd2ab19a440da74992fa03ae1de7e9a2dd017fc42257981027ade0a7206
openswan-debuginfo-2.6.32-19.el6_3.i686.rpm SHA-256: b0fc2ddae918b59e5a5d53de3429cd695fbd451623aa490e4bcf0623a2043c29
openswan-debuginfo-2.6.32-19.el6_3.i686.rpm SHA-256: b0fc2ddae918b59e5a5d53de3429cd695fbd451623aa490e4bcf0623a2043c29
openswan-doc-2.6.32-19.el6_3.i686.rpm SHA-256: dbe53ad2b3da095528e442686176f939d3b30e4bd7d561ce21e4e33d236b7786

Red Hat Enterprise Linux Server - Extended Life Cycle Support 6

SRPM
openswan-2.6.32-19.el6_3.src.rpm SHA-256: 6a8f96aad1e7d4147d89a75638a6b5b81cbff303f83ac22d45d61af462f581ef
x86_64
openswan-2.6.32-19.el6_3.x86_64.rpm SHA-256: fc251c095b159dab56b37dce7c096b2682f7e285db8a9ece52b9e49d8cbf9004
openswan-debuginfo-2.6.32-19.el6_3.x86_64.rpm SHA-256: 7be1e951493c9bd908a1c1c50883d8117c0e4731aa6c893f4f0c96437e4c7b4a
openswan-debuginfo-2.6.32-19.el6_3.x86_64.rpm SHA-256: 7be1e951493c9bd908a1c1c50883d8117c0e4731aa6c893f4f0c96437e4c7b4a
openswan-doc-2.6.32-19.el6_3.x86_64.rpm SHA-256: 0452edbc3a1b9a32e45187c188f5d4e7fa0c6a5c7e0e3c6562c076dde19d2cb4
i386
openswan-2.6.32-19.el6_3.i686.rpm SHA-256: 02deefd2ab19a440da74992fa03ae1de7e9a2dd017fc42257981027ade0a7206
openswan-debuginfo-2.6.32-19.el6_3.i686.rpm SHA-256: b0fc2ddae918b59e5a5d53de3429cd695fbd451623aa490e4bcf0623a2043c29
openswan-debuginfo-2.6.32-19.el6_3.i686.rpm SHA-256: b0fc2ddae918b59e5a5d53de3429cd695fbd451623aa490e4bcf0623a2043c29
openswan-doc-2.6.32-19.el6_3.i686.rpm SHA-256: dbe53ad2b3da095528e442686176f939d3b30e4bd7d561ce21e4e33d236b7786

Red Hat Enterprise Linux Workstation 6

SRPM
openswan-2.6.32-19.el6_3.src.rpm SHA-256: 6a8f96aad1e7d4147d89a75638a6b5b81cbff303f83ac22d45d61af462f581ef
x86_64
openswan-2.6.32-19.el6_3.x86_64.rpm SHA-256: fc251c095b159dab56b37dce7c096b2682f7e285db8a9ece52b9e49d8cbf9004
openswan-debuginfo-2.6.32-19.el6_3.x86_64.rpm SHA-256: 7be1e951493c9bd908a1c1c50883d8117c0e4731aa6c893f4f0c96437e4c7b4a
openswan-debuginfo-2.6.32-19.el6_3.x86_64.rpm SHA-256: 7be1e951493c9bd908a1c1c50883d8117c0e4731aa6c893f4f0c96437e4c7b4a
openswan-doc-2.6.32-19.el6_3.x86_64.rpm SHA-256: 0452edbc3a1b9a32e45187c188f5d4e7fa0c6a5c7e0e3c6562c076dde19d2cb4
i386
openswan-2.6.32-19.el6_3.i686.rpm SHA-256: 02deefd2ab19a440da74992fa03ae1de7e9a2dd017fc42257981027ade0a7206
openswan-debuginfo-2.6.32-19.el6_3.i686.rpm SHA-256: b0fc2ddae918b59e5a5d53de3429cd695fbd451623aa490e4bcf0623a2043c29
openswan-debuginfo-2.6.32-19.el6_3.i686.rpm SHA-256: b0fc2ddae918b59e5a5d53de3429cd695fbd451623aa490e4bcf0623a2043c29
openswan-doc-2.6.32-19.el6_3.i686.rpm SHA-256: dbe53ad2b3da095528e442686176f939d3b30e4bd7d561ce21e4e33d236b7786

Red Hat Enterprise Linux Desktop 6

SRPM
openswan-2.6.32-19.el6_3.src.rpm SHA-256: 6a8f96aad1e7d4147d89a75638a6b5b81cbff303f83ac22d45d61af462f581ef
x86_64
openswan-2.6.32-19.el6_3.x86_64.rpm SHA-256: fc251c095b159dab56b37dce7c096b2682f7e285db8a9ece52b9e49d8cbf9004
openswan-debuginfo-2.6.32-19.el6_3.x86_64.rpm SHA-256: 7be1e951493c9bd908a1c1c50883d8117c0e4731aa6c893f4f0c96437e4c7b4a
openswan-debuginfo-2.6.32-19.el6_3.x86_64.rpm SHA-256: 7be1e951493c9bd908a1c1c50883d8117c0e4731aa6c893f4f0c96437e4c7b4a
openswan-doc-2.6.32-19.el6_3.x86_64.rpm SHA-256: 0452edbc3a1b9a32e45187c188f5d4e7fa0c6a5c7e0e3c6562c076dde19d2cb4
i386
openswan-2.6.32-19.el6_3.i686.rpm SHA-256: 02deefd2ab19a440da74992fa03ae1de7e9a2dd017fc42257981027ade0a7206
openswan-debuginfo-2.6.32-19.el6_3.i686.rpm SHA-256: b0fc2ddae918b59e5a5d53de3429cd695fbd451623aa490e4bcf0623a2043c29
openswan-debuginfo-2.6.32-19.el6_3.i686.rpm SHA-256: b0fc2ddae918b59e5a5d53de3429cd695fbd451623aa490e4bcf0623a2043c29
openswan-doc-2.6.32-19.el6_3.i686.rpm SHA-256: dbe53ad2b3da095528e442686176f939d3b30e4bd7d561ce21e4e33d236b7786

Red Hat Enterprise Linux for IBM z Systems 6

SRPM
openswan-2.6.32-19.el6_3.src.rpm SHA-256: 6a8f96aad1e7d4147d89a75638a6b5b81cbff303f83ac22d45d61af462f581ef
s390x
openswan-2.6.32-19.el6_3.s390x.rpm SHA-256: bd5b42168d75fa07ed89f60603052a7e2b3f19a0dd4df501241d169fa9b8ab0b
openswan-debuginfo-2.6.32-19.el6_3.s390x.rpm SHA-256: bbea8f822924c3b114e7b0c43ccaef9926f3a40669abcb53ef196d316a215c66
openswan-debuginfo-2.6.32-19.el6_3.s390x.rpm SHA-256: bbea8f822924c3b114e7b0c43ccaef9926f3a40669abcb53ef196d316a215c66
openswan-doc-2.6.32-19.el6_3.s390x.rpm SHA-256: 0792446223a124b9c3b2c3ad1c9c282692d640970dec6e5463014bcf9bbe3ee0

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 6.3

SRPM
openswan-2.6.32-19.el6_3.src.rpm SHA-256: 6a8f96aad1e7d4147d89a75638a6b5b81cbff303f83ac22d45d61af462f581ef
s390x
openswan-2.6.32-19.el6_3.s390x.rpm SHA-256: bd5b42168d75fa07ed89f60603052a7e2b3f19a0dd4df501241d169fa9b8ab0b
openswan-debuginfo-2.6.32-19.el6_3.s390x.rpm SHA-256: bbea8f822924c3b114e7b0c43ccaef9926f3a40669abcb53ef196d316a215c66
openswan-debuginfo-2.6.32-19.el6_3.s390x.rpm SHA-256: bbea8f822924c3b114e7b0c43ccaef9926f3a40669abcb53ef196d316a215c66
openswan-doc-2.6.32-19.el6_3.s390x.rpm SHA-256: 0792446223a124b9c3b2c3ad1c9c282692d640970dec6e5463014bcf9bbe3ee0

Red Hat Enterprise Linux for Power, big endian 6

SRPM
openswan-2.6.32-19.el6_3.src.rpm SHA-256: 6a8f96aad1e7d4147d89a75638a6b5b81cbff303f83ac22d45d61af462f581ef
ppc64
openswan-2.6.32-19.el6_3.ppc64.rpm SHA-256: a3915c97aac796d8eb251e3c37baeec069b701971c30d3e1b7b3e34e23ee0d9f
openswan-debuginfo-2.6.32-19.el6_3.ppc64.rpm SHA-256: c349ddd46bb6499e6ef7f6cc01ef8f9dab6df05923b2dce5e80f1692419c57ac
openswan-debuginfo-2.6.32-19.el6_3.ppc64.rpm SHA-256: c349ddd46bb6499e6ef7f6cc01ef8f9dab6df05923b2dce5e80f1692419c57ac
openswan-doc-2.6.32-19.el6_3.ppc64.rpm SHA-256: 7c8455305e49c09804f694850a0a0068ee103625f62dc7ace32aff41f179844e

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 6.3

SRPM
openswan-2.6.32-19.el6_3.src.rpm SHA-256: 6a8f96aad1e7d4147d89a75638a6b5b81cbff303f83ac22d45d61af462f581ef
ppc64
openswan-2.6.32-19.el6_3.ppc64.rpm SHA-256: a3915c97aac796d8eb251e3c37baeec069b701971c30d3e1b7b3e34e23ee0d9f
openswan-debuginfo-2.6.32-19.el6_3.ppc64.rpm SHA-256: c349ddd46bb6499e6ef7f6cc01ef8f9dab6df05923b2dce5e80f1692419c57ac
openswan-debuginfo-2.6.32-19.el6_3.ppc64.rpm SHA-256: c349ddd46bb6499e6ef7f6cc01ef8f9dab6df05923b2dce5e80f1692419c57ac
openswan-doc-2.6.32-19.el6_3.ppc64.rpm SHA-256: 7c8455305e49c09804f694850a0a0068ee103625f62dc7ace32aff41f179844e

Red Hat Enterprise Linux Server from RHUI 6

SRPM
openswan-2.6.32-19.el6_3.src.rpm SHA-256: 6a8f96aad1e7d4147d89a75638a6b5b81cbff303f83ac22d45d61af462f581ef
x86_64
openswan-2.6.32-19.el6_3.x86_64.rpm SHA-256: fc251c095b159dab56b37dce7c096b2682f7e285db8a9ece52b9e49d8cbf9004
openswan-debuginfo-2.6.32-19.el6_3.x86_64.rpm SHA-256: 7be1e951493c9bd908a1c1c50883d8117c0e4731aa6c893f4f0c96437e4c7b4a
openswan-debuginfo-2.6.32-19.el6_3.x86_64.rpm SHA-256: 7be1e951493c9bd908a1c1c50883d8117c0e4731aa6c893f4f0c96437e4c7b4a
openswan-doc-2.6.32-19.el6_3.x86_64.rpm SHA-256: 0452edbc3a1b9a32e45187c188f5d4e7fa0c6a5c7e0e3c6562c076dde19d2cb4
i386
openswan-2.6.32-19.el6_3.i686.rpm SHA-256: 02deefd2ab19a440da74992fa03ae1de7e9a2dd017fc42257981027ade0a7206
openswan-debuginfo-2.6.32-19.el6_3.i686.rpm SHA-256: b0fc2ddae918b59e5a5d53de3429cd695fbd451623aa490e4bcf0623a2043c29
openswan-debuginfo-2.6.32-19.el6_3.i686.rpm SHA-256: b0fc2ddae918b59e5a5d53de3429cd695fbd451623aa490e4bcf0623a2043c29
openswan-doc-2.6.32-19.el6_3.i686.rpm SHA-256: dbe53ad2b3da095528e442686176f939d3b30e4bd7d561ce21e4e33d236b7786

Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.3

SRPM
openswan-2.6.32-19.el6_3.src.rpm SHA-256: 6a8f96aad1e7d4147d89a75638a6b5b81cbff303f83ac22d45d61af462f581ef
x86_64
openswan-2.6.32-19.el6_3.x86_64.rpm SHA-256: fc251c095b159dab56b37dce7c096b2682f7e285db8a9ece52b9e49d8cbf9004
openswan-debuginfo-2.6.32-19.el6_3.x86_64.rpm SHA-256: 7be1e951493c9bd908a1c1c50883d8117c0e4731aa6c893f4f0c96437e4c7b4a
i386
openswan-2.6.32-19.el6_3.i686.rpm SHA-256: 02deefd2ab19a440da74992fa03ae1de7e9a2dd017fc42257981027ade0a7206
openswan-debuginfo-2.6.32-19.el6_3.i686.rpm SHA-256: b0fc2ddae918b59e5a5d53de3429cd695fbd451623aa490e4bcf0623a2043c29

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6

SRPM
openswan-2.6.32-19.el6_3.src.rpm SHA-256: 6a8f96aad1e7d4147d89a75638a6b5b81cbff303f83ac22d45d61af462f581ef
s390x
openswan-2.6.32-19.el6_3.s390x.rpm SHA-256: bd5b42168d75fa07ed89f60603052a7e2b3f19a0dd4df501241d169fa9b8ab0b
openswan-debuginfo-2.6.32-19.el6_3.s390x.rpm SHA-256: bbea8f822924c3b114e7b0c43ccaef9926f3a40669abcb53ef196d316a215c66
openswan-debuginfo-2.6.32-19.el6_3.s390x.rpm SHA-256: bbea8f822924c3b114e7b0c43ccaef9926f3a40669abcb53ef196d316a215c66
openswan-doc-2.6.32-19.el6_3.s390x.rpm SHA-256: 0792446223a124b9c3b2c3ad1c9c282692d640970dec6e5463014bcf9bbe3ee0

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

Red Hat

Quick Links

  • Downloads
  • Subscriptions
  • Support Cases
  • Customer Service
  • Product Documentation

Help

  • Contact Us
  • Customer Portal FAQ
  • Log-in Assistance

Site Info

  • Trust Red Hat
  • Browser Support Policy
  • Accessibility
  • Awards and Recognition
  • Colophon

Related Sites

  • redhat.com
  • developers.redhat.com
  • connect.redhat.com
  • cloud.redhat.com

About

  • Red Hat Subscription Value
  • About Red Hat
  • Red Hat Jobs
2023
  • Privacy Statement
  • Terms of Use
  • All Policies and Guidelines
We've updated our Privacy Policy effective July 1st, 2023.
Red Hat Summit
Twitter