Red Hat Product Errata RHBA-2013:1718 - Bug Fix Advisory
Issued:
2013-11-20
Updated:
2013-11-20

RHBA-2013:1718 - Bug Fix Advisory

Synopsis

openswan bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Updated openswan packages that fix several bugs and add various enhancements are
now available for Red Hat Enterprise Linux 6.

Description

Openswan is a free implementation of Internet Protocol Security (IPsec) and
Internet Key Exchange (IKE). IPsec uses strong cryptography to provide both
authentication and encryption services. These services allow you to build secure
tunnels through untrusted networks.

These updated openswan packages include numerous bug fixes and enhancements.
Space precludes documenting all of these changes in this advisory. Users are
directed to the Red Hat Enterprise Linux 6.5 Technical Notes for information on
the most significant of these changes:

https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.5_Technical_Notes/openswan.html#RHBA-2013-1718

All openswan users are advised to upgrade to these updated packages, which fix
these bugs and add this enhancement.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/site/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 6 x86_64
  • Red Hat Enterprise Linux Server 6 i386
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
  • Red Hat Enterprise Linux Workstation 6 x86_64
  • Red Hat Enterprise Linux Workstation 6 i386
  • Red Hat Enterprise Linux Desktop 6 x86_64
  • Red Hat Enterprise Linux Desktop 6 i386
  • Red Hat Enterprise Linux for IBM z Systems 6 s390x
  • Red Hat Enterprise Linux for Power, big endian 6 ppc64
  • Red Hat Enterprise Linux Server from RHUI 6 x86_64
  • Red Hat Enterprise Linux Server from RHUI 6 i386
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

  • BZ - 747966 - Missing else keyword (openswan)
  • BZ - 796683 - Compile with -fno-strict-aliasing to avoid possible run-time errors
  • BZ - 868986 - rightid= can be ignored when a peer certificate name field contains a comma
  • BZ - 881914 - openswan doesn't support SHA2 certificates
  • BZ - 957400 - openswan does not load the aesni_intel kernel module
  • BZ - 959566 - fix ipsec ikeping warnings
  • BZ - 959568 - Allow disabling of NAT-T keepalive packets
  • BZ - 963833 - Abort pluto on crypto failure to prevent plaintext / nonce leaks
  • BZ - 998587 - underspecific build requires
  • BZ - 1002312 - IKEv2 skeyseed calculation only succeeds because of unspecified compiler behaviour
  • BZ - 1014009 - pluto fails to start in default configuration
  • BZ - 1017371 - Verification of openswan package fails

CVEs

(none)

Red Hat Enterprise Linux Server 6

SRPM
openswan-2.6.32-27.el6.src.rpm SHA-256: f12e92fcd3f6570490cff9ab866342c1c309a2c33f4bd33fbc1b3d771228e0f3
x86_64
openswan-2.6.32-27.el6.x86_64.rpm SHA-256: 8101e953117a3889a12360a9f1a8bbd9aa18feea54d81c4e6a15889148fe09f9
openswan-2.6.32-27.el6.x86_64.rpm SHA-256: 8101e953117a3889a12360a9f1a8bbd9aa18feea54d81c4e6a15889148fe09f9
openswan-debuginfo-2.6.32-27.el6.x86_64.rpm SHA-256: 00bc1e961fbf572fa5e6506a5f30b284cdc4ce1eed224912245c7f5377c2cd4e
openswan-debuginfo-2.6.32-27.el6.x86_64.rpm SHA-256: 00bc1e961fbf572fa5e6506a5f30b284cdc4ce1eed224912245c7f5377c2cd4e
openswan-debuginfo-2.6.32-27.el6.x86_64.rpm SHA-256: 00bc1e961fbf572fa5e6506a5f30b284cdc4ce1eed224912245c7f5377c2cd4e
openswan-doc-2.6.32-27.el6.x86_64.rpm SHA-256: cecc30d2efae984e50999fc431182da6299b1170d78dc3f5b70d03418639abc8
openswan-doc-2.6.32-27.el6.x86_64.rpm SHA-256: cecc30d2efae984e50999fc431182da6299b1170d78dc3f5b70d03418639abc8
i386
openswan-2.6.32-27.el6.i686.rpm SHA-256: 20625ca6377ac531aad91d43c67164ac417b22b2fac5129a5097950bfa9ec18e
openswan-debuginfo-2.6.32-27.el6.i686.rpm SHA-256: 2839155856b74f83ac5de2547df6b8be999be91c137dbb44ed03279edea27aa6
openswan-debuginfo-2.6.32-27.el6.i686.rpm SHA-256: 2839155856b74f83ac5de2547df6b8be999be91c137dbb44ed03279edea27aa6
openswan-doc-2.6.32-27.el6.i686.rpm SHA-256: 2b2e5adcea5ff53d83737ddc044241a51eaf39ed3adee675684d3ec836d7667f

Red Hat Enterprise Linux Server - Extended Life Cycle Support 6

SRPM
openswan-2.6.32-27.el6.src.rpm SHA-256: f12e92fcd3f6570490cff9ab866342c1c309a2c33f4bd33fbc1b3d771228e0f3
i386
openswan-2.6.32-27.el6.i686.rpm SHA-256: 20625ca6377ac531aad91d43c67164ac417b22b2fac5129a5097950bfa9ec18e
openswan-debuginfo-2.6.32-27.el6.i686.rpm SHA-256: 2839155856b74f83ac5de2547df6b8be999be91c137dbb44ed03279edea27aa6
openswan-debuginfo-2.6.32-27.el6.i686.rpm SHA-256: 2839155856b74f83ac5de2547df6b8be999be91c137dbb44ed03279edea27aa6
openswan-doc-2.6.32-27.el6.i686.rpm SHA-256: 2b2e5adcea5ff53d83737ddc044241a51eaf39ed3adee675684d3ec836d7667f
x86_64
openswan-2.6.32-27.el6.x86_64.rpm SHA-256: 8101e953117a3889a12360a9f1a8bbd9aa18feea54d81c4e6a15889148fe09f9
openswan-debuginfo-2.6.32-27.el6.x86_64.rpm SHA-256: 00bc1e961fbf572fa5e6506a5f30b284cdc4ce1eed224912245c7f5377c2cd4e
openswan-debuginfo-2.6.32-27.el6.x86_64.rpm SHA-256: 00bc1e961fbf572fa5e6506a5f30b284cdc4ce1eed224912245c7f5377c2cd4e
openswan-doc-2.6.32-27.el6.x86_64.rpm SHA-256: cecc30d2efae984e50999fc431182da6299b1170d78dc3f5b70d03418639abc8

Red Hat Enterprise Linux Workstation 6

SRPM
openswan-2.6.32-27.el6.src.rpm SHA-256: f12e92fcd3f6570490cff9ab866342c1c309a2c33f4bd33fbc1b3d771228e0f3
x86_64
openswan-2.6.32-27.el6.x86_64.rpm SHA-256: 8101e953117a3889a12360a9f1a8bbd9aa18feea54d81c4e6a15889148fe09f9
openswan-debuginfo-2.6.32-27.el6.x86_64.rpm SHA-256: 00bc1e961fbf572fa5e6506a5f30b284cdc4ce1eed224912245c7f5377c2cd4e
openswan-debuginfo-2.6.32-27.el6.x86_64.rpm SHA-256: 00bc1e961fbf572fa5e6506a5f30b284cdc4ce1eed224912245c7f5377c2cd4e
openswan-doc-2.6.32-27.el6.x86_64.rpm SHA-256: cecc30d2efae984e50999fc431182da6299b1170d78dc3f5b70d03418639abc8
i386
openswan-2.6.32-27.el6.i686.rpm SHA-256: 20625ca6377ac531aad91d43c67164ac417b22b2fac5129a5097950bfa9ec18e
openswan-debuginfo-2.6.32-27.el6.i686.rpm SHA-256: 2839155856b74f83ac5de2547df6b8be999be91c137dbb44ed03279edea27aa6
openswan-debuginfo-2.6.32-27.el6.i686.rpm SHA-256: 2839155856b74f83ac5de2547df6b8be999be91c137dbb44ed03279edea27aa6
openswan-doc-2.6.32-27.el6.i686.rpm SHA-256: 2b2e5adcea5ff53d83737ddc044241a51eaf39ed3adee675684d3ec836d7667f

Red Hat Enterprise Linux Desktop 6

SRPM
openswan-2.6.32-27.el6.src.rpm SHA-256: f12e92fcd3f6570490cff9ab866342c1c309a2c33f4bd33fbc1b3d771228e0f3
x86_64
openswan-2.6.32-27.el6.x86_64.rpm SHA-256: 8101e953117a3889a12360a9f1a8bbd9aa18feea54d81c4e6a15889148fe09f9
openswan-debuginfo-2.6.32-27.el6.x86_64.rpm SHA-256: 00bc1e961fbf572fa5e6506a5f30b284cdc4ce1eed224912245c7f5377c2cd4e
openswan-debuginfo-2.6.32-27.el6.x86_64.rpm SHA-256: 00bc1e961fbf572fa5e6506a5f30b284cdc4ce1eed224912245c7f5377c2cd4e
openswan-doc-2.6.32-27.el6.x86_64.rpm SHA-256: cecc30d2efae984e50999fc431182da6299b1170d78dc3f5b70d03418639abc8
i386
openswan-2.6.32-27.el6.i686.rpm SHA-256: 20625ca6377ac531aad91d43c67164ac417b22b2fac5129a5097950bfa9ec18e
openswan-debuginfo-2.6.32-27.el6.i686.rpm SHA-256: 2839155856b74f83ac5de2547df6b8be999be91c137dbb44ed03279edea27aa6
openswan-debuginfo-2.6.32-27.el6.i686.rpm SHA-256: 2839155856b74f83ac5de2547df6b8be999be91c137dbb44ed03279edea27aa6
openswan-doc-2.6.32-27.el6.i686.rpm SHA-256: 2b2e5adcea5ff53d83737ddc044241a51eaf39ed3adee675684d3ec836d7667f

Red Hat Enterprise Linux for IBM z Systems 6

SRPM
openswan-2.6.32-27.el6.src.rpm SHA-256: f12e92fcd3f6570490cff9ab866342c1c309a2c33f4bd33fbc1b3d771228e0f3
s390x
openswan-2.6.32-27.el6.s390x.rpm SHA-256: 54d5bc5352990c3c09ecf2ceaa2147ad7d8d123748b9f08debbebe9372c981b9
openswan-debuginfo-2.6.32-27.el6.s390x.rpm SHA-256: db553d5dbb86d2d958359cb494adbfabf5d7964822989f2a3e51552257e7f298
openswan-debuginfo-2.6.32-27.el6.s390x.rpm SHA-256: db553d5dbb86d2d958359cb494adbfabf5d7964822989f2a3e51552257e7f298
openswan-doc-2.6.32-27.el6.s390x.rpm SHA-256: 0b0595031e0af83603f2929cf4949e4baf01ffe22849a434b3bc0f56dde2a029

Red Hat Enterprise Linux for Power, big endian 6

SRPM
openswan-2.6.32-27.el6.src.rpm SHA-256: f12e92fcd3f6570490cff9ab866342c1c309a2c33f4bd33fbc1b3d771228e0f3
ppc64
openswan-2.6.32-27.el6.ppc64.rpm SHA-256: e9a6cd57cadc5a4bb6474977d423a687e4b595699703fc36c013eb88b057bf60
openswan-debuginfo-2.6.32-27.el6.ppc64.rpm SHA-256: d31b6a245330c90b3276cc9a9cc7816ec08339810cc898ff902db08602b3b1f1
openswan-debuginfo-2.6.32-27.el6.ppc64.rpm SHA-256: d31b6a245330c90b3276cc9a9cc7816ec08339810cc898ff902db08602b3b1f1
openswan-doc-2.6.32-27.el6.ppc64.rpm SHA-256: 182277201f2d7ac11fd3fe3296f7b46377d229e508ab075ecd9c4fe73ec967cf

Red Hat Enterprise Linux Server from RHUI 6

SRPM
openswan-2.6.32-27.el6.src.rpm SHA-256: f12e92fcd3f6570490cff9ab866342c1c309a2c33f4bd33fbc1b3d771228e0f3
x86_64
openswan-2.6.32-27.el6.x86_64.rpm SHA-256: 8101e953117a3889a12360a9f1a8bbd9aa18feea54d81c4e6a15889148fe09f9
openswan-debuginfo-2.6.32-27.el6.x86_64.rpm SHA-256: 00bc1e961fbf572fa5e6506a5f30b284cdc4ce1eed224912245c7f5377c2cd4e
openswan-debuginfo-2.6.32-27.el6.x86_64.rpm SHA-256: 00bc1e961fbf572fa5e6506a5f30b284cdc4ce1eed224912245c7f5377c2cd4e
openswan-doc-2.6.32-27.el6.x86_64.rpm SHA-256: cecc30d2efae984e50999fc431182da6299b1170d78dc3f5b70d03418639abc8
i386
openswan-2.6.32-27.el6.i686.rpm SHA-256: 20625ca6377ac531aad91d43c67164ac417b22b2fac5129a5097950bfa9ec18e
openswan-debuginfo-2.6.32-27.el6.i686.rpm SHA-256: 2839155856b74f83ac5de2547df6b8be999be91c137dbb44ed03279edea27aa6
openswan-debuginfo-2.6.32-27.el6.i686.rpm SHA-256: 2839155856b74f83ac5de2547df6b8be999be91c137dbb44ed03279edea27aa6
openswan-doc-2.6.32-27.el6.i686.rpm SHA-256: 2b2e5adcea5ff53d83737ddc044241a51eaf39ed3adee675684d3ec836d7667f

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6

SRPM
openswan-2.6.32-27.el6.src.rpm SHA-256: f12e92fcd3f6570490cff9ab866342c1c309a2c33f4bd33fbc1b3d771228e0f3
s390x
openswan-2.6.32-27.el6.s390x.rpm SHA-256: 54d5bc5352990c3c09ecf2ceaa2147ad7d8d123748b9f08debbebe9372c981b9
openswan-debuginfo-2.6.32-27.el6.s390x.rpm SHA-256: db553d5dbb86d2d958359cb494adbfabf5d7964822989f2a3e51552257e7f298
openswan-debuginfo-2.6.32-27.el6.s390x.rpm SHA-256: db553d5dbb86d2d958359cb494adbfabf5d7964822989f2a3e51552257e7f298
openswan-doc-2.6.32-27.el6.s390x.rpm SHA-256: 0b0595031e0af83603f2929cf4949e4baf01ffe22849a434b3bc0f56dde2a029

Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6

SRPM
openswan-2.6.32-27.el6.src.rpm SHA-256: f12e92fcd3f6570490cff9ab866342c1c309a2c33f4bd33fbc1b3d771228e0f3
x86_64
openswan-2.6.32-27.el6.x86_64.rpm SHA-256: 8101e953117a3889a12360a9f1a8bbd9aa18feea54d81c4e6a15889148fe09f9
openswan-debuginfo-2.6.32-27.el6.x86_64.rpm SHA-256: 00bc1e961fbf572fa5e6506a5f30b284cdc4ce1eed224912245c7f5377c2cd4e
openswan-debuginfo-2.6.32-27.el6.x86_64.rpm SHA-256: 00bc1e961fbf572fa5e6506a5f30b284cdc4ce1eed224912245c7f5377c2cd4e
openswan-doc-2.6.32-27.el6.x86_64.rpm SHA-256: cecc30d2efae984e50999fc431182da6299b1170d78dc3f5b70d03418639abc8
i386
openswan-2.6.32-27.el6.i686.rpm SHA-256: 20625ca6377ac531aad91d43c67164ac417b22b2fac5129a5097950bfa9ec18e
openswan-debuginfo-2.6.32-27.el6.i686.rpm SHA-256: 2839155856b74f83ac5de2547df6b8be999be91c137dbb44ed03279edea27aa6
openswan-debuginfo-2.6.32-27.el6.i686.rpm SHA-256: 2839155856b74f83ac5de2547df6b8be999be91c137dbb44ed03279edea27aa6
openswan-doc-2.6.32-27.el6.i686.rpm SHA-256: 2b2e5adcea5ff53d83737ddc044241a51eaf39ed3adee675684d3ec836d7667f

Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6

SRPM
openswan-2.6.32-27.el6.src.rpm SHA-256: f12e92fcd3f6570490cff9ab866342c1c309a2c33f4bd33fbc1b3d771228e0f3
s390x
openswan-2.6.32-27.el6.s390x.rpm SHA-256: 54d5bc5352990c3c09ecf2ceaa2147ad7d8d123748b9f08debbebe9372c981b9
openswan-debuginfo-2.6.32-27.el6.s390x.rpm SHA-256: db553d5dbb86d2d958359cb494adbfabf5d7964822989f2a3e51552257e7f298
openswan-debuginfo-2.6.32-27.el6.s390x.rpm SHA-256: db553d5dbb86d2d958359cb494adbfabf5d7964822989f2a3e51552257e7f298
openswan-doc-2.6.32-27.el6.s390x.rpm SHA-256: 0b0595031e0af83603f2929cf4949e4baf01ffe22849a434b3bc0f56dde2a029

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.