Red Hat Product Errata RHEA-2018:3174 - Product Enhancement Advisory
Issued:
2018-10-30
Updated:
2018-10-30

RHEA-2018:3174 - Product Enhancement Advisory

Synopsis

libreswan bug fix update

Type/Severity

Product Enhancement Advisory

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for libreswan is now available for Red Hat Enterprise Linux 7.

Description

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN).

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.

Users of libreswan are advised to upgrade to these updated packages.

Solution

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 7 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
  • Red Hat Enterprise Linux Workstation 7 x86_64
  • Red Hat Enterprise Linux Desktop 7 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 7 s390x
  • Red Hat Enterprise Linux for Power, big endian 7 ppc64
  • Red Hat Enterprise Linux for Power, little endian 7 ppc64le
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
  • Red Hat Enterprise Linux for ARM 64 7 aarch64
  • Red Hat Enterprise Linux for Power 9 7 ppc64le
  • Red Hat Enterprise Linux for IBM System z (Structure A) 7 s390x
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

  • BZ - 1536404 - CERT_PKCS7_WRAPPED_X509 error
  • BZ - 1544143 - ipsec newhostkey fails in FIPS mode when RSA key is generated
  • BZ - 1553406 - IKEv2 liveness false positive on IKEv2 idle connections causes tunnel to be restarted or taken down
  • BZ - 1572425 - libreswan: shared IKE SA leads to rekey interop issues
  • BZ - 1574011 - libreswan is missing a Requires: unbound-libs >= 1.6.6
  • BZ - 1591817 - rebase libreswan to 3.25
  • BZ - 1597322 - Relax deleting IKE SA's and IPsec SA's to avoid interop issues with third party VPN vendors

CVEs

(none)

Red Hat Enterprise Linux Server 7

SRPM
libreswan-3.25-2.el7.src.rpm SHA-256: 25bab493ebc8ff6bb8cdfd7c36779268edf8cf35b8b46f92bc2bb8a384bf44bb
x86_64
libreswan-3.25-2.el7.x86_64.rpm SHA-256: 1b808756755a814b64a2ad0aa2a24a055ed981effca23389511f89398c0673c3
libreswan-debuginfo-3.25-2.el7.x86_64.rpm SHA-256: 31276d000783d3aa8c516e2772f89bb6e07331f33ff4ae274925160a8ccc525e

Red Hat Enterprise Linux Server - Extended Life Cycle Support 7

SRPM
libreswan-3.25-2.el7.src.rpm SHA-256: 25bab493ebc8ff6bb8cdfd7c36779268edf8cf35b8b46f92bc2bb8a384bf44bb
x86_64
libreswan-3.25-2.el7.x86_64.rpm SHA-256: 1b808756755a814b64a2ad0aa2a24a055ed981effca23389511f89398c0673c3
libreswan-debuginfo-3.25-2.el7.x86_64.rpm SHA-256: 31276d000783d3aa8c516e2772f89bb6e07331f33ff4ae274925160a8ccc525e

Red Hat Enterprise Linux Workstation 7

SRPM
libreswan-3.25-2.el7.src.rpm SHA-256: 25bab493ebc8ff6bb8cdfd7c36779268edf8cf35b8b46f92bc2bb8a384bf44bb
x86_64
libreswan-3.25-2.el7.x86_64.rpm SHA-256: 1b808756755a814b64a2ad0aa2a24a055ed981effca23389511f89398c0673c3
libreswan-debuginfo-3.25-2.el7.x86_64.rpm SHA-256: 31276d000783d3aa8c516e2772f89bb6e07331f33ff4ae274925160a8ccc525e

Red Hat Enterprise Linux Desktop 7

SRPM
libreswan-3.25-2.el7.src.rpm SHA-256: 25bab493ebc8ff6bb8cdfd7c36779268edf8cf35b8b46f92bc2bb8a384bf44bb
x86_64
libreswan-3.25-2.el7.x86_64.rpm SHA-256: 1b808756755a814b64a2ad0aa2a24a055ed981effca23389511f89398c0673c3
libreswan-debuginfo-3.25-2.el7.x86_64.rpm SHA-256: 31276d000783d3aa8c516e2772f89bb6e07331f33ff4ae274925160a8ccc525e

Red Hat Enterprise Linux for IBM z Systems 7

SRPM
libreswan-3.25-2.el7.src.rpm SHA-256: 25bab493ebc8ff6bb8cdfd7c36779268edf8cf35b8b46f92bc2bb8a384bf44bb
s390x
libreswan-3.25-2.el7.s390x.rpm SHA-256: 203be0b6e7dea2cf27616ecf581bab24eac549d33c9c022c513044067be239f1
libreswan-debuginfo-3.25-2.el7.s390x.rpm SHA-256: 2da3db585807c1603dea2e3767a5b4ae9e50a8ba7ff7752ca0830e6d243e8ec2

Red Hat Enterprise Linux for Power, big endian 7

SRPM
libreswan-3.25-2.el7.src.rpm SHA-256: 25bab493ebc8ff6bb8cdfd7c36779268edf8cf35b8b46f92bc2bb8a384bf44bb
ppc64
libreswan-3.25-2.el7.ppc64.rpm SHA-256: f511914b39295ed46fd9277e5b7db2008dbdf83cb67b511955d1c5debe80a70d
libreswan-debuginfo-3.25-2.el7.ppc64.rpm SHA-256: 48d41fac44f881a0e6a478d1d776372d0c1ca10e144da1369cdbeb0cc96752b5

Red Hat Enterprise Linux for Power, little endian 7

SRPM
libreswan-3.25-2.el7.src.rpm SHA-256: 25bab493ebc8ff6bb8cdfd7c36779268edf8cf35b8b46f92bc2bb8a384bf44bb
ppc64le
libreswan-3.25-2.el7.ppc64le.rpm SHA-256: 0ed95dca36bab152e1b9c59f6aa0ab0b546b7511aeaa16089f99408392bfc700
libreswan-debuginfo-3.25-2.el7.ppc64le.rpm SHA-256: bd0431fb9a1d5b67cbb24ce7869c0a106e843fcdd4ca5ae06a7166b1a448c16a

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7

SRPM
libreswan-3.25-2.el7.src.rpm SHA-256: 25bab493ebc8ff6bb8cdfd7c36779268edf8cf35b8b46f92bc2bb8a384bf44bb
s390x
libreswan-3.25-2.el7.s390x.rpm SHA-256: 203be0b6e7dea2cf27616ecf581bab24eac549d33c9c022c513044067be239f1
libreswan-debuginfo-3.25-2.el7.s390x.rpm SHA-256: 2da3db585807c1603dea2e3767a5b4ae9e50a8ba7ff7752ca0830e6d243e8ec2

Red Hat Enterprise Linux for ARM 64 7

SRPM
libreswan-3.25-2.el7.src.rpm SHA-256: 25bab493ebc8ff6bb8cdfd7c36779268edf8cf35b8b46f92bc2bb8a384bf44bb
aarch64
libreswan-3.25-2.el7.aarch64.rpm SHA-256: 6860187e19417288efdd8663b86caf39532e8ab7cdd26fc5c56b6b4d95aacf1e
libreswan-debuginfo-3.25-2.el7.aarch64.rpm SHA-256: aee043c8e44fe1436daaba07977e07a0697e5613d9bb652c81f3e515e86aafae

Red Hat Enterprise Linux for Power 9 7

SRPM
libreswan-3.25-2.el7.src.rpm SHA-256: 25bab493ebc8ff6bb8cdfd7c36779268edf8cf35b8b46f92bc2bb8a384bf44bb
ppc64le
libreswan-3.25-2.el7.ppc64le.rpm SHA-256: 0ed95dca36bab152e1b9c59f6aa0ab0b546b7511aeaa16089f99408392bfc700
libreswan-debuginfo-3.25-2.el7.ppc64le.rpm SHA-256: bd0431fb9a1d5b67cbb24ce7869c0a106e843fcdd4ca5ae06a7166b1a448c16a

Red Hat Enterprise Linux for IBM System z (Structure A) 7

SRPM
libreswan-3.25-2.el7.src.rpm SHA-256: 25bab493ebc8ff6bb8cdfd7c36779268edf8cf35b8b46f92bc2bb8a384bf44bb
s390x
libreswan-3.25-2.el7.s390x.rpm SHA-256: 203be0b6e7dea2cf27616ecf581bab24eac549d33c9c022c513044067be239f1
libreswan-debuginfo-3.25-2.el7.s390x.rpm SHA-256: 2da3db585807c1603dea2e3767a5b4ae9e50a8ba7ff7752ca0830e6d243e8ec2

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7

SRPM
libreswan-3.25-2.el7.src.rpm SHA-256: 25bab493ebc8ff6bb8cdfd7c36779268edf8cf35b8b46f92bc2bb8a384bf44bb
ppc64
libreswan-3.25-2.el7.ppc64.rpm SHA-256: f511914b39295ed46fd9277e5b7db2008dbdf83cb67b511955d1c5debe80a70d
libreswan-debuginfo-3.25-2.el7.ppc64.rpm SHA-256: 48d41fac44f881a0e6a478d1d776372d0c1ca10e144da1369cdbeb0cc96752b5

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7

SRPM
libreswan-3.25-2.el7.src.rpm SHA-256: 25bab493ebc8ff6bb8cdfd7c36779268edf8cf35b8b46f92bc2bb8a384bf44bb
ppc64le
libreswan-3.25-2.el7.ppc64le.rpm SHA-256: 0ed95dca36bab152e1b9c59f6aa0ab0b546b7511aeaa16089f99408392bfc700
libreswan-debuginfo-3.25-2.el7.ppc64le.rpm SHA-256: bd0431fb9a1d5b67cbb24ce7869c0a106e843fcdd4ca5ae06a7166b1a448c16a

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.