Red Hat Security Advisory: libreswan security and bug fix update

Fixed packages 3

Vulnerabilities 2

• Low 3.1
  CVE-2019-10155

  The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are enc…

  The Libreswan Project libreswan strongswan libreswan Debian Ubuntu Alpine
  Jun 12, 2019
• Unscored —
  CVE-2019-12312

  In Libreswan 3.27 an assertion failure can lead to a pluto IKE daemon restart. An attacker can trigger a NULL pointer d…

  libreswan libreswan Debian Alpine
  May 24, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#low
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.1_release_notes/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1608353
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1679394
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1683706
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1699318
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1706180
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1712555
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1713734
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1714141
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1714331
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1723957
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3391.json
• report
  https://access.redhat.com/security/cve/CVE-2019-10155
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-10155
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-10155
• article
  https://libreswan.org/security/CVE-2019-10155/
• report
  https://access.redhat.com/security/cve/CVE-2019-12312
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1716918
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-12312
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-12312