RHBA-2013:0077 - Bug Fix Advisory

Topic

Updated openswan packages that fix multiple bugs and add various enhancements
are now available for Red Hat Enterprise Linux 5.

Description

Openswan is a free implementation of IPsec and IKE (Internet Key Exchange) for
Linux. This package contains the daemons and user space tools for setting up
Openswan. It supports the NETKEY/XFRM IPsec kernel stack that exists in the
default Linux kernel. Openswan 2.6.x also supports IKEv2 (RFC4306).

• The openswan packages have been upgraded to incorporate a number of backported

patches which provide a number of bug fixes and enhancements over the previous
version. (BZ#807772)

All users of openswan are advised to upgrade to these updated packages, which
fix these bugs and add these enhancements.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/knowledge/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 807772 - Update RHEL 6.2 OpenSwan bug fixes in RHEL 5.9, to conform to USGv6 cert

CVEs

(none)

References

(none)