| Revision Date: | 2016-11-03 | Version: | 644 |
| Title: | RHSA-2016:2603: libreswan security and bug fix update (Moderate) |
| Description: | Libreswan is an implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN).
Security Fix(es):
A traffic amplification flaw was found in the Internet Key Exchange version 1 (IKEv1) protocol. A remote attacker could use a libreswan server with IKEv1 enabled in a network traffic amplification denial of service attack against other hosts on the network by sending UDP packets with a spoofed source address to that server. (CVE-2016-5361)
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.3 Release Notes linked from the References section.
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | CVE-2016-5361
RHSA-2016:2603
RHSA-2016:2603-01
RHSA-2016:2603-02
RHSA-2016:2603-02
|
| Platform(s): | Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 7 (please do not use for >= RHEL-7.5)
| Product(s): | |
| Definition Synopsis |
| Red Hat Enterprise Linux must be installed OR Package Information
Red Hat Enterprise Linux 7 is installed
AND libreswan is earlier than 0:3.15-8.el7
AND libreswan is signed with Red Hat redhatrelease2 key
|
| Definition Synopsis |
| libreswan is earlier than 0:3.15-8.el7
AND libreswan is signed with Red Hat redhatrelease2 key
AND Package Information
Red Hat Enterprise Linux 7 Client is installed
OR Red Hat Enterprise Linux 7 Server is installed
OR Red Hat Enterprise Linux 7 Workstation is installed
OR Red Hat Enterprise Linux 7 ComputeNode is installed
|