Synopsis

new packages: libreswan

Type/Severity

Product Enhancement Advisory

Topic

New libreswan packages are now available for Red Hat Enterprise Linux 6 Extras.

Description

Libreswan is an implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN).

The openswan packages will be deprecated with the next update of Red Hat
Enterprise Linux 6. libreswan will be introduced as a direct replacement for
openswan, and is a more stable and secure VPN solution for Red Hat Enterprise
Linux 6. libreswan is already available as the VPN endpoint solution for Red Hat Enterprise Linux 7.

This enhancement update adds the libreswan packages to Red Hat Enterprise Linux 6 Extras. (BZ#1233303)

In order to help customers plan for this transition, libreswan has been made available in the RHEL 6 Extras channel.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64

Fixes

• BZ - 1271778 - ipsec whack man page discrepancies
• BZ - 1272317 - libreswan FIPS test mistakenly looks for non-existent file hashes and reports FIPS failure

CVEs

(none)

References

• http://www.redhat.com/security/updates/classification/#normal

Red Hat Enterprise Linux Server 6

SRPM
libreswan-3.15-5.el6.src.rpm	SHA-256: 2a95280d528a0625233b379273f0b29894da6038ce76bc6eb4f098273839021e
x86_64
libreswan-3.15-5.el6.x86_64.rpm	SHA-256: 79809372ae7503ed39622e2e20dbad24a91e1709d5f5561de93682ed26996a22
libreswan-debuginfo-3.15-5.el6.x86_64.rpm	SHA-256: 849aebfee22ded07615bf64e3ff56ca6ac8d90600cff501db24b5eb3031d4cc8

Red Hat Enterprise Linux for IBM z Systems 6

SRPM
libreswan-3.15-5.el6.src.rpm	SHA-256: 2a95280d528a0625233b379273f0b29894da6038ce76bc6eb4f098273839021e
s390x
libreswan-3.15-5.el6.s390x.rpm	SHA-256: 1803c5478ec5d31715624e285d7a41e34e8bbe8fc01457018fae543818e94c88
libreswan-debuginfo-3.15-5.el6.s390x.rpm	SHA-256: bd31a5766abc1ff92cd9d67f43fdef7baafa3dd26f3ebe04feb257e8ed7b3571

Red Hat Enterprise Linux for Scientific Computing 6

SRPM
libreswan-3.15-5.el6.src.rpm	SHA-256: 2a95280d528a0625233b379273f0b29894da6038ce76bc6eb4f098273839021e
x86_64
libreswan-3.15-5.el6.x86_64.rpm	SHA-256: 79809372ae7503ed39622e2e20dbad24a91e1709d5f5561de93682ed26996a22
libreswan-debuginfo-3.15-5.el6.x86_64.rpm	SHA-256: 849aebfee22ded07615bf64e3ff56ca6ac8d90600cff501db24b5eb3031d4cc8

Red Hat Enterprise Linux Server from RHUI 6

SRPM
libreswan-3.15-5.el6.src.rpm	SHA-256: 2a95280d528a0625233b379273f0b29894da6038ce76bc6eb4f098273839021e
x86_64
libreswan-3.15-5.el6.x86_64.rpm	SHA-256: 79809372ae7503ed39622e2e20dbad24a91e1709d5f5561de93682ed26996a22