Synopsis

Important: openswan security update

Type/Severity

Security Advisory: Important

Topic

Updated openswan packages that fix various security issues are now
available for Red Hat Enterprise Linux 5.

This update has been rated as having important security impact by the Red
Hat Security Response Team.

Description

Openswan is a free implementation of Internet Protocol Security (IPsec)
and Internet Key Exchange (IKE). IPsec uses strong cryptography to provide
both authentication and encryption services. These services allow you to
build secure tunnels through untrusted networks. Everything passing through
the untrusted network is encrypted by the IPsec gateway machine, and
decrypted by the gateway at the other end of the tunnel. The resulting
tunnel is a virtual private network (VPN).

Gerd v. Egidy discovered a flaw in the Dead Peer Detection (DPD) in
Openswan's pluto IKE daemon. A remote attacker could use a malicious DPD
packet to crash the pluto daemon. (CVE-2009-0790)

It was discovered that Openswan's livetest script created temporary files
in an insecure manner. A local attacker could use this flaw to overwrite
arbitrary files owned by the user running the script. (CVE-2008-4190)

Note: The livetest script is an incomplete feature and was not
automatically executed by any other script distributed with Openswan, or
intended to be used at all, as was documented in its man page. In these
updated packages, the script only prints an informative message and exits
immediately when run.

All users of openswan are advised to upgrade to these updated packages,
which contain backported patches to correct these issues. After installing
this update, the ipsec service will be restarted automatically.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Server - Extended Update Support 5.3 x86_64
• Red Hat Enterprise Linux Server - Extended Update Support 5.3 ia64
• Red Hat Enterprise Linux Server - Extended Update Support 5.3 i386
• Red Hat Enterprise Linux Server - AUS 5.3 x86_64
• Red Hat Enterprise Linux Server - AUS 5.3 ia64
• Red Hat Enterprise Linux Server - AUS 5.3 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 5.3 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 5.3 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 460425 - CVE-2008-4190 openswan: Insecure auxiliary /tmp file usage (symlink attack possible)
• BZ - 491895 - CVE-2009-0790 openswan: ISAKMP DPD remote DoS

CVEs

• CVE-2009-0790
• CVE-2008-4190

References

• http://www.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux Server 5

SRPM
openswan-2.6.14-1.el5_3.2.src.rpm	SHA-256: 15935ebb79bebd8f572c38b13b0f47b559c6bd7c71693e93ac39a15bc7363629
x86_64
openswan-2.6.14-1.el5_3.2.x86_64.rpm	SHA-256: a0ec206e799b0e8f83007dc3c76c9b6ee490c1f9492b0fc7ef82210feb446fcb
openswan-doc-2.6.14-1.el5_3.2.x86_64.rpm	SHA-256: b459eb8b6801f248b388197944b41bfa78ccc747a0ae6882444a979eccae5a3a
ia64
openswan-2.6.14-1.el5_3.2.ia64.rpm	SHA-256: 4bd16d1014f4d0074ce68514d4884f67eef2d2d6d85b2317a60aadaaf88e2526
openswan-doc-2.6.14-1.el5_3.2.ia64.rpm	SHA-256: 4e461fd9f1426becca76c87ae93cbd44eba3f4de8623805066166cbfce9045b6
i386
openswan-2.6.14-1.el5_3.2.i386.rpm	SHA-256: fd8fd26b55e4dbc2a6f5ce53f511892f5cfecc70968e7bb730744d80211dc954
openswan-doc-2.6.14-1.el5_3.2.i386.rpm	SHA-256: 3d8eb5263d4e5ee7329789f2771bdeb69c60237f881674d02e01e5091af56f5d

Red Hat Enterprise Linux Workstation 5

SRPM
openswan-2.6.14-1.el5_3.2.src.rpm	SHA-256: 15935ebb79bebd8f572c38b13b0f47b559c6bd7c71693e93ac39a15bc7363629
x86_64
openswan-2.6.14-1.el5_3.2.x86_64.rpm	SHA-256: a0ec206e799b0e8f83007dc3c76c9b6ee490c1f9492b0fc7ef82210feb446fcb
openswan-doc-2.6.14-1.el5_3.2.x86_64.rpm	SHA-256: b459eb8b6801f248b388197944b41bfa78ccc747a0ae6882444a979eccae5a3a
i386
openswan-2.6.14-1.el5_3.2.i386.rpm	SHA-256: fd8fd26b55e4dbc2a6f5ce53f511892f5cfecc70968e7bb730744d80211dc954
openswan-doc-2.6.14-1.el5_3.2.i386.rpm	SHA-256: 3d8eb5263d4e5ee7329789f2771bdeb69c60237f881674d02e01e5091af56f5d

Red Hat Enterprise Linux Desktop 5

SRPM
openswan-2.6.14-1.el5_3.2.src.rpm	SHA-256: 15935ebb79bebd8f572c38b13b0f47b559c6bd7c71693e93ac39a15bc7363629
x86_64
openswan-2.6.14-1.el5_3.2.x86_64.rpm	SHA-256: a0ec206e799b0e8f83007dc3c76c9b6ee490c1f9492b0fc7ef82210feb446fcb
openswan-doc-2.6.14-1.el5_3.2.x86_64.rpm	SHA-256: b459eb8b6801f248b388197944b41bfa78ccc747a0ae6882444a979eccae5a3a
i386
openswan-2.6.14-1.el5_3.2.i386.rpm	SHA-256: fd8fd26b55e4dbc2a6f5ce53f511892f5cfecc70968e7bb730744d80211dc954
openswan-doc-2.6.14-1.el5_3.2.i386.rpm	SHA-256: 3d8eb5263d4e5ee7329789f2771bdeb69c60237f881674d02e01e5091af56f5d

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
openswan-2.6.14-1.el5_3.2.src.rpm	SHA-256: 15935ebb79bebd8f572c38b13b0f47b559c6bd7c71693e93ac39a15bc7363629
s390x
openswan-2.6.14-1.el5_3.2.s390x.rpm	SHA-256: b1a278a4418bd0d9b13ddf99bc07ac7b4ae3563e3f09ebdcc59867650e255ae6
openswan-doc-2.6.14-1.el5_3.2.s390x.rpm	SHA-256: 4f7f0524f9f5b54403709bc5cc1796021f8ae7c5f5e2a80bca9ea01c01d15c27

Red Hat Enterprise Linux for Power, big endian 5

SRPM
openswan-2.6.14-1.el5_3.2.src.rpm	SHA-256: 15935ebb79bebd8f572c38b13b0f47b559c6bd7c71693e93ac39a15bc7363629
ppc
openswan-2.6.14-1.el5_3.2.ppc.rpm	SHA-256: 96fcf3af9aad2c7017d8610518d2ea032fb3d9b3d24132f8b5c673d1aa64fdc7
openswan-doc-2.6.14-1.el5_3.2.ppc.rpm	SHA-256: bf65e51c806152e96fe2d8b0d9ec071f829eae72f739790a04f7cd7f0696e9ec

Red Hat Enterprise Linux Server from RHUI 5

SRPM
openswan-2.6.14-1.el5_3.2.src.rpm	SHA-256: 15935ebb79bebd8f572c38b13b0f47b559c6bd7c71693e93ac39a15bc7363629
x86_64
openswan-2.6.14-1.el5_3.2.x86_64.rpm	SHA-256: a0ec206e799b0e8f83007dc3c76c9b6ee490c1f9492b0fc7ef82210feb446fcb
openswan-doc-2.6.14-1.el5_3.2.x86_64.rpm	SHA-256: b459eb8b6801f248b388197944b41bfa78ccc747a0ae6882444a979eccae5a3a
i386
openswan-2.6.14-1.el5_3.2.i386.rpm	SHA-256: fd8fd26b55e4dbc2a6f5ce53f511892f5cfecc70968e7bb730744d80211dc954
openswan-doc-2.6.14-1.el5_3.2.i386.rpm	SHA-256: 3d8eb5263d4e5ee7329789f2771bdeb69c60237f881674d02e01e5091af56f5d