ELSA-2023-6549 — Moderate: libreswan security update (Oracle Linux 9)

Summary

[4.12-1.0.1]
- Add libreswan-oracle.patch to detect Oracle Linux distro

[4.12-1]
- Update to 4.12 to fix CVE-2023-38710, CVE-2023-38711, CVE-2023-38712
- Resolves: rhbz#2215956

[4.9-5]
- Just bumping up the version to include bugs for CVE-2023-2295. There is no
code fix for it. Fix for it is including the code fix for CVE-2023-30570.
- Fix CVE-2023-2295 Regression of CVE-2023-30570 fixes in the
Red Hat Enterprise Linux
- Resolves: rhbz#2189777, rhbz#2190148

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 9	libreswan	0:4.12-1.0.1.el9

Vulnerabilities 3

Unscored —

CVE-2023-38710

An issue was discovered in Libreswan before 4.12. When an IKEv2 Child SA REKEY packet contains an invalid IPsec protoco…

libreswan libreswan libreswan libreswan Debian Ubuntu Azure Linux Alpine

Aug 25, 2023
Unscored —

CVE-2023-38711

An issue was discovered in Libreswan before 4.12. When an IKEv1 Quick Mode connection configured with ID_IPV4_ADDR or I…

libreswan libreswan libreswan libreswan Debian Ubuntu Azure Linux Alpine

Aug 25, 2023
Unscored —

CVE-2023-38712

An issue was discovered in Libreswan 3.x and 4.x before 4.12. When an IKEv1 ISAKMP SA Informational Exchange packet con…

libreswan libreswan libreswan libreswan Debian Ubuntu Azure Linux Alpine

Aug 25, 2023

Moderate: libreswan security update (Oracle Linux 9)

Summary

Fixed packages 1

Vulnerabilities 3

An issue was discovered in Libreswan before 4.12. When an IKEv2 Child SA REKEY packet contains an invalid IPsec protoco…

An issue was discovered in Libreswan before 4.12. When an IKEv1 Quick Mode connection configured with ID_IPV4_ADDR or I…

An issue was discovered in Libreswan 3.x and 4.x before 4.12. When an IKEv1 ISAKMP SA Informational Exchange packet con…