Red Hat Product Errata RHBA-2020:0257 - Bug Fix Advisory
Issued:
2020-01-28
Updated:
2020-01-28

RHBA-2020:0257 - Bug Fix Advisory

Synopsis

libreswan bug fix update

Type/Severity

Bug Fix Advisory

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Updated libreswan packages that fix one bug are now available for Red Hat
Enterprise Linux 6

Description

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN).

This update fixes the following bug:

  • `ipsec newhostkey` fails with 'ipsec rsasigkey: key pair generation failed: "-8187"'. (BZ#1781903)

Users of libreswan are advised to upgrade to these updated packages, which fix this bug.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 6 x86_64
  • Red Hat Enterprise Linux Server 6 i386
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
  • Red Hat Enterprise Linux Workstation 6 x86_64
  • Red Hat Enterprise Linux Workstation 6 i386
  • Red Hat Enterprise Linux Desktop 6 x86_64
  • Red Hat Enterprise Linux Desktop 6 i386
  • Red Hat Enterprise Linux for IBM z Systems 6 s390x
  • Red Hat Enterprise Linux for Power, big endian 6 ppc64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

  • BZ - 1781903 - `ipsec newhostkey` fails with 'ipsec rsasigkey: key pair generation failed: "-8187"'

CVEs

(none)

References

(none)

Red Hat Enterprise Linux Server 6

SRPM
libreswan-3.15-9.el6_10.src.rpm SHA-256: 59774717c89279c195f796cfb77a6d540e5c2769ec6d9c730495af231686eb35
x86_64
libreswan-3.15-9.el6_10.x86_64.rpm SHA-256: 9fc940861abf47d989704f668a32210e418a0d44f1e7baf283f3d1108559ca48
libreswan-3.15-9.el6_10.x86_64.rpm SHA-256: 9fc940861abf47d989704f668a32210e418a0d44f1e7baf283f3d1108559ca48
libreswan-debuginfo-3.15-9.el6_10.x86_64.rpm SHA-256: a0ebf6070e4f65e6d578180756cc47989a38da35e1e5102f206acd3ee12c06ec
libreswan-debuginfo-3.15-9.el6_10.x86_64.rpm SHA-256: a0ebf6070e4f65e6d578180756cc47989a38da35e1e5102f206acd3ee12c06ec
i386
libreswan-3.15-9.el6_10.i686.rpm SHA-256: 02a663f489aefab86a7f9756aeca487d3011ad6627bbf39a40005ca99af287de
libreswan-debuginfo-3.15-9.el6_10.i686.rpm SHA-256: 4b703bcc2f72e3389163586c1f6f49b2b07ff2d375df3f131b1bc2900d556d96

Red Hat Enterprise Linux Server - Extended Life Cycle Support 6

SRPM
libreswan-3.15-9.el6_10.src.rpm SHA-256: 59774717c89279c195f796cfb77a6d540e5c2769ec6d9c730495af231686eb35
x86_64
libreswan-3.15-9.el6_10.x86_64.rpm SHA-256: 9fc940861abf47d989704f668a32210e418a0d44f1e7baf283f3d1108559ca48
libreswan-debuginfo-3.15-9.el6_10.x86_64.rpm SHA-256: a0ebf6070e4f65e6d578180756cc47989a38da35e1e5102f206acd3ee12c06ec
i386
libreswan-3.15-9.el6_10.i686.rpm SHA-256: 02a663f489aefab86a7f9756aeca487d3011ad6627bbf39a40005ca99af287de
libreswan-debuginfo-3.15-9.el6_10.i686.rpm SHA-256: 4b703bcc2f72e3389163586c1f6f49b2b07ff2d375df3f131b1bc2900d556d96

Red Hat Enterprise Linux Workstation 6

SRPM
libreswan-3.15-9.el6_10.src.rpm SHA-256: 59774717c89279c195f796cfb77a6d540e5c2769ec6d9c730495af231686eb35
x86_64
libreswan-3.15-9.el6_10.x86_64.rpm SHA-256: 9fc940861abf47d989704f668a32210e418a0d44f1e7baf283f3d1108559ca48
libreswan-debuginfo-3.15-9.el6_10.x86_64.rpm SHA-256: a0ebf6070e4f65e6d578180756cc47989a38da35e1e5102f206acd3ee12c06ec
i386
libreswan-3.15-9.el6_10.i686.rpm SHA-256: 02a663f489aefab86a7f9756aeca487d3011ad6627bbf39a40005ca99af287de
libreswan-debuginfo-3.15-9.el6_10.i686.rpm SHA-256: 4b703bcc2f72e3389163586c1f6f49b2b07ff2d375df3f131b1bc2900d556d96

Red Hat Enterprise Linux Desktop 6

SRPM
libreswan-3.15-9.el6_10.src.rpm SHA-256: 59774717c89279c195f796cfb77a6d540e5c2769ec6d9c730495af231686eb35
x86_64
libreswan-3.15-9.el6_10.x86_64.rpm SHA-256: 9fc940861abf47d989704f668a32210e418a0d44f1e7baf283f3d1108559ca48
libreswan-debuginfo-3.15-9.el6_10.x86_64.rpm SHA-256: a0ebf6070e4f65e6d578180756cc47989a38da35e1e5102f206acd3ee12c06ec
i386
libreswan-3.15-9.el6_10.i686.rpm SHA-256: 02a663f489aefab86a7f9756aeca487d3011ad6627bbf39a40005ca99af287de
libreswan-debuginfo-3.15-9.el6_10.i686.rpm SHA-256: 4b703bcc2f72e3389163586c1f6f49b2b07ff2d375df3f131b1bc2900d556d96

Red Hat Enterprise Linux for IBM z Systems 6

SRPM
libreswan-3.15-9.el6_10.src.rpm SHA-256: 59774717c89279c195f796cfb77a6d540e5c2769ec6d9c730495af231686eb35
s390x
libreswan-3.15-9.el6_10.s390x.rpm SHA-256: 46b04bc8bd53748e25ed32c54df6206e575835f496b68bfa03ebde47bcfd2690
libreswan-debuginfo-3.15-9.el6_10.s390x.rpm SHA-256: 0b6679eb7b92c8c9e3d0703cc5b5d87bbd94e9145eb1a0678e6fe7a70e32c9bd

Red Hat Enterprise Linux for Power, big endian 6

SRPM
libreswan-3.15-9.el6_10.src.rpm SHA-256: 59774717c89279c195f796cfb77a6d540e5c2769ec6d9c730495af231686eb35
ppc64
libreswan-3.15-9.el6_10.ppc64.rpm SHA-256: 7ded06c042e86f0c9db0c0f75f6e2c7d51f5ba9035cb6f2e1f7ea79fdab10580
libreswan-debuginfo-3.15-9.el6_10.ppc64.rpm SHA-256: 840ed037e91973a80ca4c1e7d54970564d7a661d71e8cccb0dca08a6ed438e45

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6

SRPM
libreswan-3.15-9.el6_10.src.rpm SHA-256: 59774717c89279c195f796cfb77a6d540e5c2769ec6d9c730495af231686eb35
s390x
libreswan-3.15-9.el6_10.s390x.rpm SHA-256: 46b04bc8bd53748e25ed32c54df6206e575835f496b68bfa03ebde47bcfd2690
libreswan-debuginfo-3.15-9.el6_10.s390x.rpm SHA-256: 0b6679eb7b92c8c9e3d0703cc5b5d87bbd94e9145eb1a0678e6fe7a70e32c9bd

Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6

SRPM
libreswan-3.15-9.el6_10.src.rpm SHA-256: 59774717c89279c195f796cfb77a6d540e5c2769ec6d9c730495af231686eb35
x86_64
libreswan-3.15-9.el6_10.x86_64.rpm SHA-256: 9fc940861abf47d989704f668a32210e418a0d44f1e7baf283f3d1108559ca48
libreswan-debuginfo-3.15-9.el6_10.x86_64.rpm SHA-256: a0ebf6070e4f65e6d578180756cc47989a38da35e1e5102f206acd3ee12c06ec
i386
libreswan-3.15-9.el6_10.i686.rpm SHA-256: 02a663f489aefab86a7f9756aeca487d3011ad6627bbf39a40005ca99af287de
libreswan-debuginfo-3.15-9.el6_10.i686.rpm SHA-256: 4b703bcc2f72e3389163586c1f6f49b2b07ff2d375df3f131b1bc2900d556d96

Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6

SRPM
libreswan-3.15-9.el6_10.src.rpm SHA-256: 59774717c89279c195f796cfb77a6d540e5c2769ec6d9c730495af231686eb35
s390x
libreswan-3.15-9.el6_10.s390x.rpm SHA-256: 46b04bc8bd53748e25ed32c54df6206e575835f496b68bfa03ebde47bcfd2690
libreswan-debuginfo-3.15-9.el6_10.s390x.rpm SHA-256: 0b6679eb7b92c8c9e3d0703cc5b5d87bbd94e9145eb1a0678e6fe7a70e32c9bd

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.