Issued:
2021-11-09
Updated:
2021-11-09

RHBA-2021:4299 - Bug Fix Advisory

Synopsis

libreswan bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for libreswan is now available for Red Hat Enterprise Linux 8.

Description

For detailed information on changes in this release, see the Red Hat
Enterprise Linux 8.5 Release Notes linked from the References section.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 8 aarch64

Fixes

  • BZ - 1934058 - ikeport does not work for host-to-host
  • BZ - 1934714 - DH section in ipsec.conf man page is outdated
  • BZ - 1935339 - virtual_private setting is missing in the default config [rhel-8.5.0]
  • BZ - 1954423 - Libreswan: TS_UNACCEPTABLE on multiple connections between the same peers

CVEs

(none)

Red Hat Enterprise Linux for x86_64 8

SRPM
libreswan-4.4-1.el8.src.rpm SHA-256: cd6a805bc14029deeea2daad61db5fda810ea17dda8304fda69635a5c29f17c6
x86_64
libreswan-4.4-1.el8.x86_64.rpm SHA-256: ac928114d93d31d019c0fecb9c3e11f17839a5e105beb7fb1996096b4f44124f
libreswan-debuginfo-4.4-1.el8.x86_64.rpm SHA-256: d4d2e2df2531032c5b1d77c99fc82bd69a0da7562cf8f9556ff5e33a5ec49e0e
libreswan-debugsource-4.4-1.el8.x86_64.rpm SHA-256: e7d1eb1ff907fce7a9b996b9574fffd150a5a83e0b0b935cffa03405c35256e3

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
libreswan-4.4-1.el8.src.rpm SHA-256: cd6a805bc14029deeea2daad61db5fda810ea17dda8304fda69635a5c29f17c6
s390x
libreswan-4.4-1.el8.s390x.rpm SHA-256: c2a1bc019671c890c7c97690b0e84d40e341b10b8ace3f9c7e7d3fcdee9f7584
libreswan-debuginfo-4.4-1.el8.s390x.rpm SHA-256: a7f7bf9a1e832c62e92d8640dbc29e538dea36438de44d37b7578d004fc3d297
libreswan-debugsource-4.4-1.el8.s390x.rpm SHA-256: ea8c86842243cbbf1078df938c15c325f76590ce8d03be5812c963066b9f5e21

Red Hat Enterprise Linux for Power, little endian 8

SRPM
libreswan-4.4-1.el8.src.rpm SHA-256: cd6a805bc14029deeea2daad61db5fda810ea17dda8304fda69635a5c29f17c6
ppc64le
libreswan-4.4-1.el8.ppc64le.rpm SHA-256: 3273ff0dc807380328448118266e97a005abf0ee7515372dd1a84b6ed5c647f1
libreswan-debuginfo-4.4-1.el8.ppc64le.rpm SHA-256: 2d0d65812cff2fa5550492d61336d0a2c46e86204ca29ed8e61304e78bb1eb0b
libreswan-debugsource-4.4-1.el8.ppc64le.rpm SHA-256: 1f247a5303acfb4d9fc08b0d15e699b97039a9daee9d0f235081b2ea633b218a

Red Hat Enterprise Linux for ARM 64 8

SRPM
libreswan-4.4-1.el8.src.rpm SHA-256: cd6a805bc14029deeea2daad61db5fda810ea17dda8304fda69635a5c29f17c6
aarch64
libreswan-4.4-1.el8.aarch64.rpm SHA-256: 46f4d7bf2aa985623a65331b8a7470002403c3c9c314dba215cf0f2cb1a658d3
libreswan-debuginfo-4.4-1.el8.aarch64.rpm SHA-256: 518c9322d8371242f731df7059a49df40211f30a97180595d746dc3f8da5e765
libreswan-debugsource-4.4-1.el8.aarch64.rpm SHA-256: a021df79a177c2b77227f707c729c7894bc11795811b7ae5dfb94bd9bc7dbe9f

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.