Red Hat Product Errata RHBA-2016:0890 - Bug Fix Advisory
Issued:
2016-05-10
Updated:
2016-05-10

RHBA-2016:0890 - Bug Fix Advisory

Synopsis

libreswan bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for libreswan is now available for Red Hat Enterprise Linux 6.

Description

Libreswan is an implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN).

For detailed information on changes in this release, see the Red Hat Enterprise Linux 6.8 Release Notes and Red Hat Enterprise Linux 6.8 Technical Notes linked from the References section.

Users of libreswan are advised to upgrade to these updated packages.

Solution

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 6 x86_64
  • Red Hat Enterprise Linux Server 6 i386
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
  • Red Hat Enterprise Linux Workstation 6 x86_64
  • Red Hat Enterprise Linux Workstation 6 i386
  • Red Hat Enterprise Linux Desktop 6 x86_64
  • Red Hat Enterprise Linux Desktop 6 i386
  • Red Hat Enterprise Linux for IBM z Systems 6 s390x
  • Red Hat Enterprise Linux Server from RHUI 6 x86_64
  • Red Hat Enterprise Linux Server from RHUI 6 i386
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
  • Red Hat Enterprise Linux for Power, big endian 6 ppc64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

  • BZ - 1166151 - Pluto crashes on INITIATOR site during 'service ipsec stop'
  • BZ - 1265410 - libreswan should support strictcrlpolicy alias for crl-strict= option to support openswan migration
  • BZ - 1272080 - libreswan FIPS test mistakenly looks for non-existent file hashes and reports FIPS failure
  • BZ - 1288086 - /var/run/pluto should have 755 and should have 700

CVEs

(none)

Red Hat Enterprise Linux Server 6

SRPM
libreswan-3.15-5.3.el6.src.rpm SHA-256: 6c27e2527d1334d27f8d5ce868b5b6bbec5648e878080483389b2962fbe6601d
x86_64
libreswan-3.15-5.3.el6.x86_64.rpm SHA-256: 1e5401e33714dde7ec1c14042250385297aaa2f122937ca8034d1d5177e6258d
libreswan-3.15-5.3.el6.x86_64.rpm SHA-256: 1e5401e33714dde7ec1c14042250385297aaa2f122937ca8034d1d5177e6258d
libreswan-debuginfo-3.15-5.3.el6.x86_64.rpm SHA-256: d665c3ee3bee7266d1f7c554c27c21676d5438df8ac95d1bdcee6acece976195
libreswan-debuginfo-3.15-5.3.el6.x86_64.rpm SHA-256: d665c3ee3bee7266d1f7c554c27c21676d5438df8ac95d1bdcee6acece976195
i386
libreswan-3.15-5.3.el6.i686.rpm SHA-256: 38ae230b3091ca35981a644d01e35515022b14cb119d4208339ec3ea7f9114bd
libreswan-debuginfo-3.15-5.3.el6.i686.rpm SHA-256: 6d7959d6ccfa4ad75f1bc0f0fe749c395430ad8b573f14cd2cfe31509b54991e

Red Hat Enterprise Linux Server from RHUI 6

SRPM
libreswan-3.15-5.3.el6.src.rpm SHA-256: 6c27e2527d1334d27f8d5ce868b5b6bbec5648e878080483389b2962fbe6601d
x86_64
libreswan-3.15-5.3.el6.x86_64.rpm SHA-256: 1e5401e33714dde7ec1c14042250385297aaa2f122937ca8034d1d5177e6258d
libreswan-debuginfo-3.15-5.3.el6.x86_64.rpm SHA-256: d665c3ee3bee7266d1f7c554c27c21676d5438df8ac95d1bdcee6acece976195
i386
libreswan-3.15-5.3.el6.i686.rpm SHA-256: 38ae230b3091ca35981a644d01e35515022b14cb119d4208339ec3ea7f9114bd
libreswan-debuginfo-3.15-5.3.el6.i686.rpm SHA-256: 6d7959d6ccfa4ad75f1bc0f0fe749c395430ad8b573f14cd2cfe31509b54991e

Red Hat Enterprise Linux Server - Extended Life Cycle Support 6

SRPM
libreswan-3.15-5.3.el6.src.rpm SHA-256: 6c27e2527d1334d27f8d5ce868b5b6bbec5648e878080483389b2962fbe6601d
x86_64
libreswan-3.15-5.3.el6.x86_64.rpm SHA-256: 1e5401e33714dde7ec1c14042250385297aaa2f122937ca8034d1d5177e6258d
libreswan-debuginfo-3.15-5.3.el6.x86_64.rpm SHA-256: d665c3ee3bee7266d1f7c554c27c21676d5438df8ac95d1bdcee6acece976195
i386
libreswan-3.15-5.3.el6.i686.rpm SHA-256: 38ae230b3091ca35981a644d01e35515022b14cb119d4208339ec3ea7f9114bd
libreswan-debuginfo-3.15-5.3.el6.i686.rpm SHA-256: 6d7959d6ccfa4ad75f1bc0f0fe749c395430ad8b573f14cd2cfe31509b54991e

Red Hat Enterprise Linux Workstation 6

SRPM
libreswan-3.15-5.3.el6.src.rpm SHA-256: 6c27e2527d1334d27f8d5ce868b5b6bbec5648e878080483389b2962fbe6601d
x86_64
libreswan-3.15-5.3.el6.x86_64.rpm SHA-256: 1e5401e33714dde7ec1c14042250385297aaa2f122937ca8034d1d5177e6258d
libreswan-debuginfo-3.15-5.3.el6.x86_64.rpm SHA-256: d665c3ee3bee7266d1f7c554c27c21676d5438df8ac95d1bdcee6acece976195
i386
libreswan-3.15-5.3.el6.i686.rpm SHA-256: 38ae230b3091ca35981a644d01e35515022b14cb119d4208339ec3ea7f9114bd
libreswan-debuginfo-3.15-5.3.el6.i686.rpm SHA-256: 6d7959d6ccfa4ad75f1bc0f0fe749c395430ad8b573f14cd2cfe31509b54991e

Red Hat Enterprise Linux Desktop 6

SRPM
libreswan-3.15-5.3.el6.src.rpm SHA-256: 6c27e2527d1334d27f8d5ce868b5b6bbec5648e878080483389b2962fbe6601d
x86_64
libreswan-3.15-5.3.el6.x86_64.rpm SHA-256: 1e5401e33714dde7ec1c14042250385297aaa2f122937ca8034d1d5177e6258d
libreswan-debuginfo-3.15-5.3.el6.x86_64.rpm SHA-256: d665c3ee3bee7266d1f7c554c27c21676d5438df8ac95d1bdcee6acece976195
i386
libreswan-3.15-5.3.el6.i686.rpm SHA-256: 38ae230b3091ca35981a644d01e35515022b14cb119d4208339ec3ea7f9114bd
libreswan-debuginfo-3.15-5.3.el6.i686.rpm SHA-256: 6d7959d6ccfa4ad75f1bc0f0fe749c395430ad8b573f14cd2cfe31509b54991e

Red Hat Enterprise Linux for IBM z Systems 6

SRPM
libreswan-3.15-5.3.el6.src.rpm SHA-256: 6c27e2527d1334d27f8d5ce868b5b6bbec5648e878080483389b2962fbe6601d
s390x
libreswan-3.15-5.3.el6.s390x.rpm SHA-256: d18b51408aeee05d15e5f49f12eed9f8e64b31c272372bca39f1cd91a6e9c6c2
libreswan-debuginfo-3.15-5.3.el6.s390x.rpm SHA-256: ed36e6dd05d5e7e08f6846d3c6923b9df0f0997ed0479a562765aefd5948e3a7

Red Hat Enterprise Linux for Power, big endian 6

SRPM
libreswan-3.15-5.3.el6.src.rpm SHA-256: 6c27e2527d1334d27f8d5ce868b5b6bbec5648e878080483389b2962fbe6601d
ppc64
libreswan-3.15-5.3.el6.ppc64.rpm SHA-256: 9764404d0870773fce5d867f8480569be8222e06a235067f3e0b2b9f9cf5bc5a
libreswan-debuginfo-3.15-5.3.el6.ppc64.rpm SHA-256: 5f6bd53c68a6eb10a84d14d41c4454a5c6afb89936a599b7d07180775810dd07

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6

SRPM
libreswan-3.15-5.3.el6.src.rpm SHA-256: 6c27e2527d1334d27f8d5ce868b5b6bbec5648e878080483389b2962fbe6601d
s390x
libreswan-3.15-5.3.el6.s390x.rpm SHA-256: d18b51408aeee05d15e5f49f12eed9f8e64b31c272372bca39f1cd91a6e9c6c2
libreswan-debuginfo-3.15-5.3.el6.s390x.rpm SHA-256: ed36e6dd05d5e7e08f6846d3c6923b9df0f0997ed0479a562765aefd5948e3a7

Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6

SRPM
libreswan-3.15-5.3.el6.src.rpm SHA-256: 6c27e2527d1334d27f8d5ce868b5b6bbec5648e878080483389b2962fbe6601d
x86_64
libreswan-3.15-5.3.el6.x86_64.rpm SHA-256: 1e5401e33714dde7ec1c14042250385297aaa2f122937ca8034d1d5177e6258d
libreswan-debuginfo-3.15-5.3.el6.x86_64.rpm SHA-256: d665c3ee3bee7266d1f7c554c27c21676d5438df8ac95d1bdcee6acece976195
i386
libreswan-3.15-5.3.el6.i686.rpm SHA-256: 38ae230b3091ca35981a644d01e35515022b14cb119d4208339ec3ea7f9114bd
libreswan-debuginfo-3.15-5.3.el6.i686.rpm SHA-256: 6d7959d6ccfa4ad75f1bc0f0fe749c395430ad8b573f14cd2cfe31509b54991e

Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6

SRPM
libreswan-3.15-5.3.el6.src.rpm SHA-256: 6c27e2527d1334d27f8d5ce868b5b6bbec5648e878080483389b2962fbe6601d
s390x
libreswan-3.15-5.3.el6.s390x.rpm SHA-256: d18b51408aeee05d15e5f49f12eed9f8e64b31c272372bca39f1cd91a6e9c6c2
libreswan-debuginfo-3.15-5.3.el6.s390x.rpm SHA-256: ed36e6dd05d5e7e08f6846d3c6923b9df0f0997ed0479a562765aefd5948e3a7

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.