Summary
[4.12-2.0.1.1]
- Add libreswan-oracle.patch to detect Oracle Linux distro
[4.12-2.1]
- Fix CVE-2024-3652 (RHEL-40102)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | libreswan | 0:4.12-2.0.1.el9_4.1 |
Vulnerabilities 1
-
Medium 6.5
IKEv1 default AH/ESP responder can cause libreswan to abort and restart
The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line. When the peer requests AES-GMAC, libreswan's default proposal handler causes an assertion failure and crashes and restarts. IKEv2 con…