Red Hat Product Errata RHBA-2020:4067 - Bug Fix Advisory
Issued:
2020-09-29
Updated:
2020-09-29

RHBA-2020:4067 - Bug Fix Advisory

Synopsis

libreswan bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for libreswan is now available for Red Hat Enterprise Linux 7.

Description

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the
Internet Protocol Security and uses strong cryptography to provide both
authentication and encryption services. These services allow you to build
secure tunnels through untrusted networks such as virtual private network
(VPN).

Bug Fix(es) and Enhancement(s):

  • Backport FIPS keysize fixes from RHEL8 (BZ#1844621)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 7 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
  • Red Hat Enterprise Linux Workstation 7 x86_64
  • Red Hat Enterprise Linux Desktop 7 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 7 s390x
  • Red Hat Enterprise Linux for Power, big endian 7 ppc64
  • Red Hat Enterprise Linux for Power, little endian 7 ppc64le
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

  • BZ - 1844621 - Backport FIPS keysize fixes from RHEL8 [rhel-7.9.z]

CVEs

(none)

References

(none)

Red Hat Enterprise Linux Server 7

SRPM
libreswan-3.25-9.1.el7_9.src.rpm SHA-256: 746f48981677e951f5d1ea734ee23874a1be4f9963c349a94d4411197d938bfc
x86_64
libreswan-3.25-9.1.el7_9.x86_64.rpm SHA-256: a165e8fe8dbfce6420b333dc1ff3437f84221d2475cc308e30cbc4552babdd8b
libreswan-debuginfo-3.25-9.1.el7_9.x86_64.rpm SHA-256: 872be39f5a779a8f8467d830fb97601625147d071891bdf90cb9a8f62f332f7c

Red Hat Enterprise Linux Server - Extended Life Cycle Support 7

SRPM
libreswan-3.25-9.1.el7_9.src.rpm SHA-256: 746f48981677e951f5d1ea734ee23874a1be4f9963c349a94d4411197d938bfc
x86_64
libreswan-3.25-9.1.el7_9.x86_64.rpm SHA-256: a165e8fe8dbfce6420b333dc1ff3437f84221d2475cc308e30cbc4552babdd8b
libreswan-debuginfo-3.25-9.1.el7_9.x86_64.rpm SHA-256: 872be39f5a779a8f8467d830fb97601625147d071891bdf90cb9a8f62f332f7c

Red Hat Enterprise Linux Workstation 7

SRPM
libreswan-3.25-9.1.el7_9.src.rpm SHA-256: 746f48981677e951f5d1ea734ee23874a1be4f9963c349a94d4411197d938bfc
x86_64
libreswan-3.25-9.1.el7_9.x86_64.rpm SHA-256: a165e8fe8dbfce6420b333dc1ff3437f84221d2475cc308e30cbc4552babdd8b
libreswan-debuginfo-3.25-9.1.el7_9.x86_64.rpm SHA-256: 872be39f5a779a8f8467d830fb97601625147d071891bdf90cb9a8f62f332f7c

Red Hat Enterprise Linux Desktop 7

SRPM
libreswan-3.25-9.1.el7_9.src.rpm SHA-256: 746f48981677e951f5d1ea734ee23874a1be4f9963c349a94d4411197d938bfc
x86_64
libreswan-3.25-9.1.el7_9.x86_64.rpm SHA-256: a165e8fe8dbfce6420b333dc1ff3437f84221d2475cc308e30cbc4552babdd8b
libreswan-debuginfo-3.25-9.1.el7_9.x86_64.rpm SHA-256: 872be39f5a779a8f8467d830fb97601625147d071891bdf90cb9a8f62f332f7c

Red Hat Enterprise Linux for IBM z Systems 7

SRPM
libreswan-3.25-9.1.el7_9.src.rpm SHA-256: 746f48981677e951f5d1ea734ee23874a1be4f9963c349a94d4411197d938bfc
s390x
libreswan-3.25-9.1.el7_9.s390x.rpm SHA-256: 2a77febe27f7744899d7a4c6dd1f820acb6feeacda20212e71bd00edfaf1a388
libreswan-debuginfo-3.25-9.1.el7_9.s390x.rpm SHA-256: 8a26041efedf7e14bd765cbd888495c562633cd8e1515598eba5107a47414f11

Red Hat Enterprise Linux for Power, big endian 7

SRPM
libreswan-3.25-9.1.el7_9.src.rpm SHA-256: 746f48981677e951f5d1ea734ee23874a1be4f9963c349a94d4411197d938bfc
ppc64
libreswan-3.25-9.1.el7_9.ppc64.rpm SHA-256: c80c2310756590ae0747bbce23fd062db011b62dbf41f0b06364ac90a9c6a363
libreswan-debuginfo-3.25-9.1.el7_9.ppc64.rpm SHA-256: f1aa862e4cc6bc82e4ac5767ecdc43dc0d0bf2980518bb659a13c3baa376dfc6

Red Hat Enterprise Linux for Power, little endian 7

SRPM
libreswan-3.25-9.1.el7_9.src.rpm SHA-256: 746f48981677e951f5d1ea734ee23874a1be4f9963c349a94d4411197d938bfc
ppc64le
libreswan-3.25-9.1.el7_9.ppc64le.rpm SHA-256: b81b393dfb0f04f492aacf5d1064b9314c66de66cb9bde69124aa7c6a441de16
libreswan-debuginfo-3.25-9.1.el7_9.ppc64le.rpm SHA-256: 1ae7a6e3f601db1727914c2ad0a7a5d0f2087c1889423784bc679763257fd045

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7

SRPM
libreswan-3.25-9.1.el7_9.src.rpm SHA-256: 746f48981677e951f5d1ea734ee23874a1be4f9963c349a94d4411197d938bfc
s390x
libreswan-3.25-9.1.el7_9.s390x.rpm SHA-256: 2a77febe27f7744899d7a4c6dd1f820acb6feeacda20212e71bd00edfaf1a388
libreswan-debuginfo-3.25-9.1.el7_9.s390x.rpm SHA-256: 8a26041efedf7e14bd765cbd888495c562633cd8e1515598eba5107a47414f11

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7

SRPM
libreswan-3.25-9.1.el7_9.src.rpm SHA-256: 746f48981677e951f5d1ea734ee23874a1be4f9963c349a94d4411197d938bfc
ppc64
libreswan-3.25-9.1.el7_9.ppc64.rpm SHA-256: c80c2310756590ae0747bbce23fd062db011b62dbf41f0b06364ac90a9c6a363
libreswan-debuginfo-3.25-9.1.el7_9.ppc64.rpm SHA-256: f1aa862e4cc6bc82e4ac5767ecdc43dc0d0bf2980518bb659a13c3baa376dfc6

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7

SRPM
libreswan-3.25-9.1.el7_9.src.rpm SHA-256: 746f48981677e951f5d1ea734ee23874a1be4f9963c349a94d4411197d938bfc
ppc64le
libreswan-3.25-9.1.el7_9.ppc64le.rpm SHA-256: b81b393dfb0f04f492aacf5d1064b9314c66de66cb9bde69124aa7c6a441de16
libreswan-debuginfo-3.25-9.1.el7_9.ppc64le.rpm SHA-256: 1ae7a6e3f601db1727914c2ad0a7a5d0f2087c1889423784bc679763257fd045

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.