Publié :: 2023-05-04
Mis à jour :: 2023-05-04

RHSA-2023:2122 - Security Advisory

Aperçu général
Paquets mis à jour

Synopsis

Important: libreswan security update

Type / Sévérité

Security Advisory: Important

Analyse des correctifs dans Red Hat Insights

Identifiez et remédiez aux systèmes concernés par cette alerte.

Voir les systèmes concernés

Sujet

An update for libreswan is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN).

Security Fix(es):

libreswan: Malicious IKEv1 Aggressive Mode packets can crash libreswan (CVE-2023-30570)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Produits concernés

Red Hat Enterprise Linux for x86_64 8 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.8 x86_64
Red Hat Enterprise Linux for IBM z Systems 8 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8 s390x
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8 ppc64le
Red Hat Enterprise Linux Server - TUS 8.8 x86_64
Red Hat Enterprise Linux for ARM 64 8 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8 aarch64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64
Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64
Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le
Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x
Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle Long Life 8.8 aarch64
Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle Long Life 8.8 ppc64le
Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle Long Life 8.8 s390x

Correctifs

BZ - 2187165 - CVE-2023-30570 libreswan: Malicious IKEv1 Aggressive Mode packets can crash libreswan

CVE

CVE-2023-30570

Références

https://access.redhat.com/security/updates/classification/#important

Remarque: Il existe peut-être des versions plus récentes de ces paquets. Cliquer sur un nom de paquet pour obtenir plus de détails.

Red Hat Enterprise Linux for x86_64 8

SRPM
libreswan-4.5-1.el8_7.1.src.rpm	SHA-256: 6065204be76c5be2e8043277e543bbc4b426596825923a99b9cd5cba9e6948c4
x86_64
libreswan-4.5-1.el8_7.1.x86_64.rpm	SHA-256: bc19a846ace7807ab8a6cd76b3d206d00ff4bfb13be0d09c46d0e13f6fbb2d5e
libreswan-debuginfo-4.5-1.el8_7.1.x86_64.rpm	SHA-256: c9568354c26c6e3d06a1703e9eaa5f00fe55ec93b059944e37eb23af8c077482
libreswan-debugsource-4.5-1.el8_7.1.x86_64.rpm	SHA-256: 21f8a12830962c01ce1cc239c0acc5205f9ca88193592afc6498a189a56f91be

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8

SRPM
libreswan-4.5-1.el8_7.1.src.rpm	SHA-256: 6065204be76c5be2e8043277e543bbc4b426596825923a99b9cd5cba9e6948c4
x86_64
libreswan-4.5-1.el8_7.1.x86_64.rpm	SHA-256: bc19a846ace7807ab8a6cd76b3d206d00ff4bfb13be0d09c46d0e13f6fbb2d5e
libreswan-debuginfo-4.5-1.el8_7.1.x86_64.rpm	SHA-256: c9568354c26c6e3d06a1703e9eaa5f00fe55ec93b059944e37eb23af8c077482
libreswan-debugsource-4.5-1.el8_7.1.x86_64.rpm	SHA-256: 21f8a12830962c01ce1cc239c0acc5205f9ca88193592afc6498a189a56f91be

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.8

SRPM
libreswan-4.5-1.el8_7.1.src.rpm	SHA-256: 6065204be76c5be2e8043277e543bbc4b426596825923a99b9cd5cba9e6948c4
x86_64
libreswan-4.5-1.el8_7.1.x86_64.rpm	SHA-256: bc19a846ace7807ab8a6cd76b3d206d00ff4bfb13be0d09c46d0e13f6fbb2d5e
libreswan-debuginfo-4.5-1.el8_7.1.x86_64.rpm	SHA-256: c9568354c26c6e3d06a1703e9eaa5f00fe55ec93b059944e37eb23af8c077482
libreswan-debugsource-4.5-1.el8_7.1.x86_64.rpm	SHA-256: 21f8a12830962c01ce1cc239c0acc5205f9ca88193592afc6498a189a56f91be

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
libreswan-4.5-1.el8_7.1.src.rpm	SHA-256: 6065204be76c5be2e8043277e543bbc4b426596825923a99b9cd5cba9e6948c4
s390x
libreswan-4.5-1.el8_7.1.s390x.rpm	SHA-256: 886763d6c1117629c38876bbea45cdf4fc594a251ef84dcdf4e6175b3201677a
libreswan-debuginfo-4.5-1.el8_7.1.s390x.rpm	SHA-256: eceea1d4cd77ee97cdb4dc35d9f09bbe479fc3c369c6f52a61f9ca710ed4570b
libreswan-debugsource-4.5-1.el8_7.1.s390x.rpm	SHA-256: 1832d15af76e7ca182af9e127564e8544481b8df9a8b5d4d64011ad771e14cf2

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8

SRPM
libreswan-4.5-1.el8_7.1.src.rpm	SHA-256: 6065204be76c5be2e8043277e543bbc4b426596825923a99b9cd5cba9e6948c4
s390x
libreswan-4.5-1.el8_7.1.s390x.rpm	SHA-256: 886763d6c1117629c38876bbea45cdf4fc594a251ef84dcdf4e6175b3201677a
libreswan-debuginfo-4.5-1.el8_7.1.s390x.rpm	SHA-256: eceea1d4cd77ee97cdb4dc35d9f09bbe479fc3c369c6f52a61f9ca710ed4570b
libreswan-debugsource-4.5-1.el8_7.1.s390x.rpm	SHA-256: 1832d15af76e7ca182af9e127564e8544481b8df9a8b5d4d64011ad771e14cf2

Red Hat Enterprise Linux for Power, little endian 8

SRPM
libreswan-4.5-1.el8_7.1.src.rpm	SHA-256: 6065204be76c5be2e8043277e543bbc4b426596825923a99b9cd5cba9e6948c4
ppc64le
libreswan-4.5-1.el8_7.1.ppc64le.rpm	SHA-256: 3997257fc795799cc26d8861aa86af0fe715f3bbadaa1d9eda7efa0767047dcc
libreswan-debuginfo-4.5-1.el8_7.1.ppc64le.rpm	SHA-256: 2ceaf47bcbb25f8673600f2235bcf7eaafa22ce6de83fcd96d2b670c86640cbf
libreswan-debugsource-4.5-1.el8_7.1.ppc64le.rpm	SHA-256: 7c51b28a7168e90e211dccdc83807a8bba83e925c17cb39a71b8d288f1ec4a4c

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8

SRPM
libreswan-4.5-1.el8_7.1.src.rpm	SHA-256: 6065204be76c5be2e8043277e543bbc4b426596825923a99b9cd5cba9e6948c4
ppc64le
libreswan-4.5-1.el8_7.1.ppc64le.rpm	SHA-256: 3997257fc795799cc26d8861aa86af0fe715f3bbadaa1d9eda7efa0767047dcc
libreswan-debuginfo-4.5-1.el8_7.1.ppc64le.rpm	SHA-256: 2ceaf47bcbb25f8673600f2235bcf7eaafa22ce6de83fcd96d2b670c86640cbf
libreswan-debugsource-4.5-1.el8_7.1.ppc64le.rpm	SHA-256: 7c51b28a7168e90e211dccdc83807a8bba83e925c17cb39a71b8d288f1ec4a4c

Red Hat Enterprise Linux Server - TUS 8.8

SRPM
libreswan-4.5-1.el8_7.1.src.rpm	SHA-256: 6065204be76c5be2e8043277e543bbc4b426596825923a99b9cd5cba9e6948c4
x86_64
libreswan-4.5-1.el8_7.1.x86_64.rpm	SHA-256: bc19a846ace7807ab8a6cd76b3d206d00ff4bfb13be0d09c46d0e13f6fbb2d5e
libreswan-debuginfo-4.5-1.el8_7.1.x86_64.rpm	SHA-256: c9568354c26c6e3d06a1703e9eaa5f00fe55ec93b059944e37eb23af8c077482
libreswan-debugsource-4.5-1.el8_7.1.x86_64.rpm	SHA-256: 21f8a12830962c01ce1cc239c0acc5205f9ca88193592afc6498a189a56f91be

Red Hat Enterprise Linux for ARM 64 8

SRPM
libreswan-4.5-1.el8_7.1.src.rpm	SHA-256: 6065204be76c5be2e8043277e543bbc4b426596825923a99b9cd5cba9e6948c4
aarch64
libreswan-4.5-1.el8_7.1.aarch64.rpm	SHA-256: 674f8612477f4e7670f9ffd1049880fa267b395a8d258b9a14b80a8b025926f3
libreswan-debuginfo-4.5-1.el8_7.1.aarch64.rpm	SHA-256: 33f4d283de79412f0fb19a922221513110d0778ea115c2b0c6c54a4a5a5946e8
libreswan-debugsource-4.5-1.el8_7.1.aarch64.rpm	SHA-256: 82b2d460856a3011083adb6ec63f815549257a507a7e41da6bc188bd169fcf2f

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8

SRPM
libreswan-4.5-1.el8_7.1.src.rpm	SHA-256: 6065204be76c5be2e8043277e543bbc4b426596825923a99b9cd5cba9e6948c4
aarch64
libreswan-4.5-1.el8_7.1.aarch64.rpm	SHA-256: 674f8612477f4e7670f9ffd1049880fa267b395a8d258b9a14b80a8b025926f3
libreswan-debuginfo-4.5-1.el8_7.1.aarch64.rpm	SHA-256: 33f4d283de79412f0fb19a922221513110d0778ea115c2b0c6c54a4a5a5946e8
libreswan-debugsource-4.5-1.el8_7.1.aarch64.rpm	SHA-256: 82b2d460856a3011083adb6ec63f815549257a507a7e41da6bc188bd169fcf2f

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8

SRPM
libreswan-4.5-1.el8_7.1.src.rpm	SHA-256: 6065204be76c5be2e8043277e543bbc4b426596825923a99b9cd5cba9e6948c4
ppc64le
libreswan-4.5-1.el8_7.1.ppc64le.rpm	SHA-256: 3997257fc795799cc26d8861aa86af0fe715f3bbadaa1d9eda7efa0767047dcc
libreswan-debuginfo-4.5-1.el8_7.1.ppc64le.rpm	SHA-256: 2ceaf47bcbb25f8673600f2235bcf7eaafa22ce6de83fcd96d2b670c86640cbf
libreswan-debugsource-4.5-1.el8_7.1.ppc64le.rpm	SHA-256: 7c51b28a7168e90e211dccdc83807a8bba83e925c17cb39a71b8d288f1ec4a4c

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8

SRPM
libreswan-4.5-1.el8_7.1.src.rpm	SHA-256: 6065204be76c5be2e8043277e543bbc4b426596825923a99b9cd5cba9e6948c4
x86_64
libreswan-4.5-1.el8_7.1.x86_64.rpm	SHA-256: bc19a846ace7807ab8a6cd76b3d206d00ff4bfb13be0d09c46d0e13f6fbb2d5e
libreswan-debuginfo-4.5-1.el8_7.1.x86_64.rpm	SHA-256: c9568354c26c6e3d06a1703e9eaa5f00fe55ec93b059944e37eb23af8c077482
libreswan-debugsource-4.5-1.el8_7.1.x86_64.rpm	SHA-256: 21f8a12830962c01ce1cc239c0acc5205f9ca88193592afc6498a189a56f91be

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10

SRPM
libreswan-4.5-1.el8_7.1.src.rpm	SHA-256: 6065204be76c5be2e8043277e543bbc4b426596825923a99b9cd5cba9e6948c4
x86_64
libreswan-4.5-1.el8_7.1.x86_64.rpm	SHA-256: bc19a846ace7807ab8a6cd76b3d206d00ff4bfb13be0d09c46d0e13f6fbb2d5e
libreswan-debuginfo-4.5-1.el8_7.1.x86_64.rpm	SHA-256: c9568354c26c6e3d06a1703e9eaa5f00fe55ec93b059944e37eb23af8c077482
libreswan-debugsource-4.5-1.el8_7.1.x86_64.rpm	SHA-256: 21f8a12830962c01ce1cc239c0acc5205f9ca88193592afc6498a189a56f91be

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10

SRPM
libreswan-4.5-1.el8_7.1.src.rpm	SHA-256: 6065204be76c5be2e8043277e543bbc4b426596825923a99b9cd5cba9e6948c4
aarch64
libreswan-4.5-1.el8_7.1.aarch64.rpm	SHA-256: 674f8612477f4e7670f9ffd1049880fa267b395a8d258b9a14b80a8b025926f3
libreswan-debuginfo-4.5-1.el8_7.1.aarch64.rpm	SHA-256: 33f4d283de79412f0fb19a922221513110d0778ea115c2b0c6c54a4a5a5946e8
libreswan-debugsource-4.5-1.el8_7.1.aarch64.rpm	SHA-256: 82b2d460856a3011083adb6ec63f815549257a507a7e41da6bc188bd169fcf2f

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10

SRPM
libreswan-4.5-1.el8_7.1.src.rpm	SHA-256: 6065204be76c5be2e8043277e543bbc4b426596825923a99b9cd5cba9e6948c4
ppc64le
libreswan-4.5-1.el8_7.1.ppc64le.rpm	SHA-256: 3997257fc795799cc26d8861aa86af0fe715f3bbadaa1d9eda7efa0767047dcc
libreswan-debuginfo-4.5-1.el8_7.1.ppc64le.rpm	SHA-256: 2ceaf47bcbb25f8673600f2235bcf7eaafa22ce6de83fcd96d2b670c86640cbf
libreswan-debugsource-4.5-1.el8_7.1.ppc64le.rpm	SHA-256: 7c51b28a7168e90e211dccdc83807a8bba83e925c17cb39a71b8d288f1ec4a4c

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10

SRPM
libreswan-4.5-1.el8_7.1.src.rpm	SHA-256: 6065204be76c5be2e8043277e543bbc4b426596825923a99b9cd5cba9e6948c4
s390x
libreswan-4.5-1.el8_7.1.s390x.rpm	SHA-256: 886763d6c1117629c38876bbea45cdf4fc594a251ef84dcdf4e6175b3201677a
libreswan-debuginfo-4.5-1.el8_7.1.s390x.rpm	SHA-256: eceea1d4cd77ee97cdb4dc35d9f09bbe479fc3c369c6f52a61f9ca710ed4570b
libreswan-debugsource-4.5-1.el8_7.1.s390x.rpm	SHA-256: 1832d15af76e7ca182af9e127564e8544481b8df9a8b5d4d64011ad771e14cf2

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle Long Life 8.8

SRPM
libreswan-4.5-1.el8_7.1.src.rpm	SHA-256: 6065204be76c5be2e8043277e543bbc4b426596825923a99b9cd5cba9e6948c4
aarch64
libreswan-4.5-1.el8_7.1.aarch64.rpm	SHA-256: 674f8612477f4e7670f9ffd1049880fa267b395a8d258b9a14b80a8b025926f3
libreswan-debuginfo-4.5-1.el8_7.1.aarch64.rpm	SHA-256: 33f4d283de79412f0fb19a922221513110d0778ea115c2b0c6c54a4a5a5946e8
libreswan-debugsource-4.5-1.el8_7.1.aarch64.rpm	SHA-256: 82b2d460856a3011083adb6ec63f815549257a507a7e41da6bc188bd169fcf2f

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle Long Life 8.8

SRPM
libreswan-4.5-1.el8_7.1.src.rpm	SHA-256: 6065204be76c5be2e8043277e543bbc4b426596825923a99b9cd5cba9e6948c4
ppc64le
libreswan-4.5-1.el8_7.1.ppc64le.rpm	SHA-256: 3997257fc795799cc26d8861aa86af0fe715f3bbadaa1d9eda7efa0767047dcc
libreswan-debuginfo-4.5-1.el8_7.1.ppc64le.rpm	SHA-256: 2ceaf47bcbb25f8673600f2235bcf7eaafa22ce6de83fcd96d2b670c86640cbf
libreswan-debugsource-4.5-1.el8_7.1.ppc64le.rpm	SHA-256: 7c51b28a7168e90e211dccdc83807a8bba83e925c17cb39a71b8d288f1ec4a4c

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle Long Life 8.8

SRPM
libreswan-4.5-1.el8_7.1.src.rpm	SHA-256: 6065204be76c5be2e8043277e543bbc4b426596825923a99b9cd5cba9e6948c4
s390x
libreswan-4.5-1.el8_7.1.s390x.rpm	SHA-256: 886763d6c1117629c38876bbea45cdf4fc594a251ef84dcdf4e6175b3201677a
libreswan-debuginfo-4.5-1.el8_7.1.s390x.rpm	SHA-256: eceea1d4cd77ee97cdb4dc35d9f09bbe479fc3c369c6f52a61f9ca710ed4570b
libreswan-debugsource-4.5-1.el8_7.1.s390x.rpm	SHA-256: 1832d15af76e7ca182af9e127564e8544481b8df9a8b5d4d64011ad771e14cf2

Le contact Red Hat Security est secalert@redhat.com. Plus d'infos contact à https://access.redhat.com/security/team/contact/.