[El-errata] ELSA-2015-1979 Moderate: Oracle Linux 7 libreswan security and enhancement update

Errata Announcements for Oracle Linux el-errata at oss.oracle.com
Tue Nov 3 14:57:21 PST 2015

Oracle Linux Security Advisory ELSA-2015-1979


The following updated rpms for Oracle Linux 7 have been uploaded to the 
Unbreakable Linux Network:



Description of changes:

- add libreswan-oracle.patch to detect Oracle Linux distro

- Resolves: rhbz#1273719 libreswan FIPS test mistakenly looks for 
non-existent file hashes

- Resolves: rhbz#1268775 libreswan should support strictcrlpolicy alias
- Resolves: rhbz#1268776 Pluto crashes after stop when I use floating ip 
- Resolves: rhbz#1268773 Pluto crashes on INITIATOR site during 'service 
ipsec stop'
- Resolves: rhbz#1208022 libreswan ignores module blacklist rules
- Resolves: rhbz#1270673 ipsec does not work properly on loopback

- Resolves: rhbz#1259208 CVE-2015-3240
- Merge rhel6 and rhel7 spec into one
- Be lenient for racoon padding behaviour
- Fix seedev option to /dev/random
- Some IKEv1 PAM methods always gave 'Permission denied'
- Parser workarounds for differences in gcc/flex/bison on rhel6/rhel7
- Parser fix to allow specifying time without unit (openswan compat)
- Fix Labeled IPsec on rekeyed IPsec SA's
- Workaround for wrong padding by racoon2
- Disable NSS HW GCM to workaround rhel6 xen builers bug

More information about the El-errata mailing list