Medium ELSA-2023-7052 3 CVEs

Moderate: libreswan security update (Oracle Linux 8)

Published Nov 17, 2023 · Updated Nov 17, 2023

Ecosystem: Oracle Linux

Summary

[4.12-2.0.1]
- Add libreswan-oracle.patch to detect Oracle Linux distro

[4.12-2]
- Resolves: rhbz#2234731 authby=rsasig fails in FIPS policy

[4.12-1]
- Update to 4.12 to fix CVE-2023-38710, CVE-2023-38711, CVE-2023-38712
- Resolves: rhbz#2215955

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	libreswan	0:4.12-2.0.1.el8

Vulnerabilities 3

Unscored —

CVE-2023-38710

An issue was discovered in Libreswan before 4.12. When an IKEv2 Child SA REKEY packet contains an invalid IPsec protoco…

libreswan libreswan libreswan libreswan Debian Ubuntu Azure Linux Alpine

Aug 25, 2023
Unscored —

CVE-2023-38711

An issue was discovered in Libreswan before 4.12. When an IKEv1 Quick Mode connection configured with ID_IPV4_ADDR or I…

libreswan libreswan libreswan libreswan Debian Ubuntu Azure Linux Alpine

Aug 25, 2023
Unscored —

CVE-2023-38712

An issue was discovered in Libreswan 3.x and 4.x before 4.12. When an IKEv1 ISAKMP SA Informational Exchange packet con…

libreswan libreswan libreswan libreswan Debian Ubuntu Azure Linux Alpine

Aug 25, 2023