Red Hat Bug Fix Advisory: OpenShift Container Platform 4.17.10 packages and security update

Fixed packages 3

Vulnerabilities 8

• High 7.5
  CVE-2023-2295

  A vulnerability was found in the libreswan library. This security issue occurs when an IKEv1 Aggressive Mode packet is …

  libreswan Ubuntu
  May 17, 2023
• High 7.5
  CVE-2023-30570

  pluto in Libreswan before 4.11 allows a denial of service (responder SPI mishandling and daemon crash) via unauthentica…

  libreswan libreswan libreswan libreswan Debian Ubuntu Azure Linux Alpine
  May 28, 2023
• Medium 6.5
  CVE-2023-23009

  Libreswan 4.9 allows remote attackers to cause a denial of service (assert failure and daemon restart) via crafted TS p…

  libreswan libreswan libreswan Debian Ubuntu Alpine
  Feb 21, 2023
• Medium 6.5
  CVE-2024-2357

  IKEv2 misconfiguration can cause libreswan to abort and restart

  The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot find a matching configured secret. When such a con…

  The Libreswan Project (www.libreswan.org) libreswan libreswan libreswan Debian Ubuntu Azure Linux Alpine
  Mar 11, 2024
• Medium 6.5
  CVE-2024-3652

  IKEv1 default AH/ESP responder can cause libreswan to abort and restart

  The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line. When the peer requests AES-GMAC, libreswan's default proposal handler causes an assertion failure and crashes and restarts. IKEv2 con…

  The Libreswan Project (www.libreswan.org) libreswan libreswan libreswan Debian Ubuntu Azure Linux Alpine
  Apr 11, 2024
• Unscored —
  CVE-2023-38710

  An issue was discovered in Libreswan before 4.12. When an IKEv2 Child SA REKEY packet contains an invalid IPsec protoco…

  libreswan libreswan libreswan libreswan Debian Ubuntu Azure Linux Alpine
  Aug 25, 2023
• Unscored —
  CVE-2023-38711

  An issue was discovered in Libreswan before 4.12. When an IKEv1 Quick Mode connection configured with ID_IPV4_ADDR or I…

  libreswan libreswan libreswan libreswan Debian Ubuntu Azure Linux Alpine
  Aug 25, 2023
• Unscored —
  CVE-2023-38712

  An issue was discovered in Libreswan 3.x and 4.x before 4.12. When an IKEv1 ISAKMP SA Informational Exchange packet con…

  libreswan libreswan libreswan libreswan Debian Ubuntu Azure Linux Alpine
  Aug 25, 2023

References

• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2024_11525.json
• report
  https://access.redhat.com/security/cve/CVE-2023-2295
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2189777
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-2295
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-2295
• report
  https://access.redhat.com/security/cve/CVE-2023-23009
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2173610
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-23009
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-23009
• article
  https://github.com/libreswan/libreswan/issues/954
• report
  https://access.redhat.com/security/cve/CVE-2023-30570
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2187165
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-30570
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-30570
• article
  https://libreswan.org/security/
• article
  https://libreswan.org/security/CVE-2023-30570/CVE-2023-30570.txt
• report
  https://access.redhat.com/security/cve/CVE-2023-38710
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2225368
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-38710
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-38710
• article
  https://github.com/libreswan/libreswan/releases/tag/v4.12
• article
  https://libreswan.org/security/CVE-2023-38710/CVE-2023-38710.txt
• report
  https://access.redhat.com/security/cve/CVE-2023-38711
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2215952
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-38711
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-38711
• article
  https://libreswan.org/security/CVE-2023-38711/CVE-2023-38711.txt
• report
  https://access.redhat.com/security/cve/CVE-2023-38712
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2225369
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-38712
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-38712
• article
  https://libreswan.org/security/CVE-2023-38712/CVE-2023-38712.txt
• report
  https://access.redhat.com/security/cve/CVE-2024-2357
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2268952
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-2357
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-2357
• article
  https://github.com/libreswan/libreswan/commit/cb9e1047d33fde695d63a95854c2bc2470a476c8.patch
• article
  https://libreswan.org/security/CVE-2024-2357
• report
  https://access.redhat.com/security/cve/CVE-2024-3652