Medium ELSA-2024-2565 1 CVE

Moderate: libreswan security update (Oracle Linux 9)

Published May 7, 2024 · Updated May 7, 2024

Ecosystem: Oracle Linux

Summary

[4.12-2.0.1]
- Add libreswan-oracle.patch to detect Oracle Linux distro

[4.12-2]
- Fix CVE-2024-2357 (RHEL-32761)
- x509: unpack IPv6 general names based on length (RHEL-32718)

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 9	libreswan	0:4.12-2.0.1.el9_4

Vulnerabilities 1

Medium 6.5

CVE-2024-2357

IKEv2 misconfiguration can cause libreswan to abort and restart

The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot find a matching configured secret. When such a con…

The Libreswan Project (www.libreswan.org) libreswan libreswan libreswan Debian Ubuntu Azure Linux Alpine

Mar 11, 2024