Red Hat Product Errata RHBA-2025:2974 - Bug Fix Advisory
Issued:
2025-03-18
Updated:
2025-03-18

RHBA-2025:2974 - Bug Fix Advisory

Synopsis

libreswan bug fix update

Type/Severity

Bug Fix Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for libreswan is now available for Red Hat Enterprise Linux 9.

Description

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN).

Bug Fix(es):

  • Crash on accessing keys while re-reading secrets [rhel-9.5.z] (JIRA:RHEL-68755)
  • Race condition in CREATE_CHILD_SA processing [rhel-9.5.z] (JIRA:RHEL-71496)
  • ipsec showhostkey: RSA public key exponent too long for resource record [rhel-9.5.z] (JIRA:RHEL-75967)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.6 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x

Fixes

(none)

CVEs

(none)

References

(none)

Red Hat Enterprise Linux for x86_64 9

SRPM
libreswan-4.15-3.el9_5.3.src.rpm SHA-256: 84eba927df675ac8d6f464b9bffa6e2bf8c7718bbc55c2f56ebcc0bd0bfcd7a9
x86_64
libreswan-4.15-3.el9_5.3.x86_64.rpm SHA-256: 23f29d2c61f59133d7bc0a6fec0a8d45403354e599cc5342cfa36469f1824c89
libreswan-debuginfo-4.15-3.el9_5.3.x86_64.rpm SHA-256: 440c96a5ed1f326e15c7c3767e183d25392996d118dca3c461b26f9aacdfaa28
libreswan-debugsource-4.15-3.el9_5.3.x86_64.rpm SHA-256: 7b20c9d9ce0af7ffbfb6a484d305d39d80df3d4a80e4b253c632304a2fea7375

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6

SRPM
libreswan-4.15-3.el9_5.3.src.rpm SHA-256: 84eba927df675ac8d6f464b9bffa6e2bf8c7718bbc55c2f56ebcc0bd0bfcd7a9
x86_64
libreswan-4.15-3.el9_5.3.x86_64.rpm SHA-256: 23f29d2c61f59133d7bc0a6fec0a8d45403354e599cc5342cfa36469f1824c89
libreswan-debuginfo-4.15-3.el9_5.3.x86_64.rpm SHA-256: 440c96a5ed1f326e15c7c3767e183d25392996d118dca3c461b26f9aacdfaa28
libreswan-debugsource-4.15-3.el9_5.3.x86_64.rpm SHA-256: 7b20c9d9ce0af7ffbfb6a484d305d39d80df3d4a80e4b253c632304a2fea7375

Red Hat Enterprise Linux Server - AUS 9.6

SRPM
libreswan-4.15-3.el9_5.3.src.rpm SHA-256: 84eba927df675ac8d6f464b9bffa6e2bf8c7718bbc55c2f56ebcc0bd0bfcd7a9
x86_64
libreswan-4.15-3.el9_5.3.x86_64.rpm SHA-256: 23f29d2c61f59133d7bc0a6fec0a8d45403354e599cc5342cfa36469f1824c89
libreswan-debuginfo-4.15-3.el9_5.3.x86_64.rpm SHA-256: 440c96a5ed1f326e15c7c3767e183d25392996d118dca3c461b26f9aacdfaa28
libreswan-debugsource-4.15-3.el9_5.3.x86_64.rpm SHA-256: 7b20c9d9ce0af7ffbfb6a484d305d39d80df3d4a80e4b253c632304a2fea7375

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
libreswan-4.15-3.el9_5.3.src.rpm SHA-256: 84eba927df675ac8d6f464b9bffa6e2bf8c7718bbc55c2f56ebcc0bd0bfcd7a9
s390x
libreswan-4.15-3.el9_5.3.s390x.rpm SHA-256: 11a561ea2451d99d191a68f7ef623efc7fb294581c240f92f9579674a4854d32
libreswan-debuginfo-4.15-3.el9_5.3.s390x.rpm SHA-256: 67ae6450763bc12834cde4c291ddb0c7832fd9651bd33cca6e89c7a3d0ce6361
libreswan-debugsource-4.15-3.el9_5.3.s390x.rpm SHA-256: 3e9d069ee3d7fdea71b515fc931679b1bafdd3ea3fe6712e9b351686a9c5f6fc

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6

SRPM
libreswan-4.15-3.el9_5.3.src.rpm SHA-256: 84eba927df675ac8d6f464b9bffa6e2bf8c7718bbc55c2f56ebcc0bd0bfcd7a9
s390x
libreswan-4.15-3.el9_5.3.s390x.rpm SHA-256: 11a561ea2451d99d191a68f7ef623efc7fb294581c240f92f9579674a4854d32
libreswan-debuginfo-4.15-3.el9_5.3.s390x.rpm SHA-256: 67ae6450763bc12834cde4c291ddb0c7832fd9651bd33cca6e89c7a3d0ce6361
libreswan-debugsource-4.15-3.el9_5.3.s390x.rpm SHA-256: 3e9d069ee3d7fdea71b515fc931679b1bafdd3ea3fe6712e9b351686a9c5f6fc

Red Hat Enterprise Linux for Power, little endian 9

SRPM
libreswan-4.15-3.el9_5.3.src.rpm SHA-256: 84eba927df675ac8d6f464b9bffa6e2bf8c7718bbc55c2f56ebcc0bd0bfcd7a9
ppc64le
libreswan-4.15-3.el9_5.3.ppc64le.rpm SHA-256: c975d4deb7d875d2d0aa66d39346d4df2c0d2b55602c7f1dd94388abd6eb1a0b
libreswan-debuginfo-4.15-3.el9_5.3.ppc64le.rpm SHA-256: 6cb272702b4049e703d58059b23f3436569c8897fc84b936bdff3c1f15ee845a
libreswan-debugsource-4.15-3.el9_5.3.ppc64le.rpm SHA-256: 8956059a7f6ad975b6a816a75f198c79e6810e3b5ee0506e5000b66d3702f53b

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6

SRPM
libreswan-4.15-3.el9_5.3.src.rpm SHA-256: 84eba927df675ac8d6f464b9bffa6e2bf8c7718bbc55c2f56ebcc0bd0bfcd7a9
ppc64le
libreswan-4.15-3.el9_5.3.ppc64le.rpm SHA-256: c975d4deb7d875d2d0aa66d39346d4df2c0d2b55602c7f1dd94388abd6eb1a0b
libreswan-debuginfo-4.15-3.el9_5.3.ppc64le.rpm SHA-256: 6cb272702b4049e703d58059b23f3436569c8897fc84b936bdff3c1f15ee845a
libreswan-debugsource-4.15-3.el9_5.3.ppc64le.rpm SHA-256: 8956059a7f6ad975b6a816a75f198c79e6810e3b5ee0506e5000b66d3702f53b

Red Hat Enterprise Linux for ARM 64 9

SRPM
libreswan-4.15-3.el9_5.3.src.rpm SHA-256: 84eba927df675ac8d6f464b9bffa6e2bf8c7718bbc55c2f56ebcc0bd0bfcd7a9
aarch64
libreswan-4.15-3.el9_5.3.aarch64.rpm SHA-256: fcca18cd1b30edf6f532776ea022346a40ad6818fde520a78f8893e5e3f6ddc3
libreswan-debuginfo-4.15-3.el9_5.3.aarch64.rpm SHA-256: d148a6c2b47374bb8904883468e54a8e4e17bb10155c31222ea015e55750758a
libreswan-debugsource-4.15-3.el9_5.3.aarch64.rpm SHA-256: dc43bd56a00d6e97bf696c39fe5d68148061654f62d4cc320391ae1e1ca6a24b

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6

SRPM
libreswan-4.15-3.el9_5.3.src.rpm SHA-256: 84eba927df675ac8d6f464b9bffa6e2bf8c7718bbc55c2f56ebcc0bd0bfcd7a9
aarch64
libreswan-4.15-3.el9_5.3.aarch64.rpm SHA-256: fcca18cd1b30edf6f532776ea022346a40ad6818fde520a78f8893e5e3f6ddc3
libreswan-debuginfo-4.15-3.el9_5.3.aarch64.rpm SHA-256: d148a6c2b47374bb8904883468e54a8e4e17bb10155c31222ea015e55750758a
libreswan-debugsource-4.15-3.el9_5.3.aarch64.rpm SHA-256: dc43bd56a00d6e97bf696c39fe5d68148061654f62d4cc320391ae1e1ca6a24b

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6

SRPM
libreswan-4.15-3.el9_5.3.src.rpm SHA-256: 84eba927df675ac8d6f464b9bffa6e2bf8c7718bbc55c2f56ebcc0bd0bfcd7a9
ppc64le
libreswan-4.15-3.el9_5.3.ppc64le.rpm SHA-256: c975d4deb7d875d2d0aa66d39346d4df2c0d2b55602c7f1dd94388abd6eb1a0b
libreswan-debuginfo-4.15-3.el9_5.3.ppc64le.rpm SHA-256: 6cb272702b4049e703d58059b23f3436569c8897fc84b936bdff3c1f15ee845a
libreswan-debugsource-4.15-3.el9_5.3.ppc64le.rpm SHA-256: 8956059a7f6ad975b6a816a75f198c79e6810e3b5ee0506e5000b66d3702f53b

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6

SRPM
libreswan-4.15-3.el9_5.3.src.rpm SHA-256: 84eba927df675ac8d6f464b9bffa6e2bf8c7718bbc55c2f56ebcc0bd0bfcd7a9
x86_64
libreswan-4.15-3.el9_5.3.x86_64.rpm SHA-256: 23f29d2c61f59133d7bc0a6fec0a8d45403354e599cc5342cfa36469f1824c89
libreswan-debuginfo-4.15-3.el9_5.3.x86_64.rpm SHA-256: 440c96a5ed1f326e15c7c3767e183d25392996d118dca3c461b26f9aacdfaa28
libreswan-debugsource-4.15-3.el9_5.3.x86_64.rpm SHA-256: 7b20c9d9ce0af7ffbfb6a484d305d39d80df3d4a80e4b253c632304a2fea7375

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6

SRPM
libreswan-4.15-3.el9_5.3.src.rpm SHA-256: 84eba927df675ac8d6f464b9bffa6e2bf8c7718bbc55c2f56ebcc0bd0bfcd7a9
aarch64
libreswan-4.15-3.el9_5.3.aarch64.rpm SHA-256: fcca18cd1b30edf6f532776ea022346a40ad6818fde520a78f8893e5e3f6ddc3
libreswan-debuginfo-4.15-3.el9_5.3.aarch64.rpm SHA-256: d148a6c2b47374bb8904883468e54a8e4e17bb10155c31222ea015e55750758a
libreswan-debugsource-4.15-3.el9_5.3.aarch64.rpm SHA-256: dc43bd56a00d6e97bf696c39fe5d68148061654f62d4cc320391ae1e1ca6a24b

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6

SRPM
libreswan-4.15-3.el9_5.3.src.rpm SHA-256: 84eba927df675ac8d6f464b9bffa6e2bf8c7718bbc55c2f56ebcc0bd0bfcd7a9
s390x
libreswan-4.15-3.el9_5.3.s390x.rpm SHA-256: 11a561ea2451d99d191a68f7ef623efc7fb294581c240f92f9579674a4854d32
libreswan-debuginfo-4.15-3.el9_5.3.s390x.rpm SHA-256: 67ae6450763bc12834cde4c291ddb0c7832fd9651bd33cca6e89c7a3d0ce6361
libreswan-debugsource-4.15-3.el9_5.3.s390x.rpm SHA-256: 3e9d069ee3d7fdea71b515fc931679b1bafdd3ea3fe6712e9b351686a9c5f6fc

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.