-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-7478 2009-07-11 02:41:12 --------------------------------------------------------------------------------
Name : openswan Product : Fedora 11 Version : 2.6.21 Release : 5.fc11 URL : http://www.openswan.org/ Summary : Openswan IPSEC implementation Description : Openswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the untrusted net is encrypted by the ipsec gateway machine and decrypted by the gateway at the other end of the tunnel. The resulting tunnel is a virtual private network or VPN. This package contains the daemons and userland tools for setting up Openswan. It optionally also builds the Openswan KLIPS IPsec stack that is an alternative for the NETKEY/XFRM IPsec stack that exists in the default Linux kernel. Openswan 2.6.x also supports IKEv2 (RFC4309) -------------------------------------------------------------------------------- Update Information: Fixes Openswan PSK issue with NSS. Fixes CVE-2009-2185 -------------------------------------------------------------------------------- ChangeLog: * Mon Jul 6 2009 Avesh Agarwal <[email protected]> - 2.6.21-5 - Added support for using PSK with NSS - Fixed several warnings and undid unnecessary comments - Updated README.nss with an example configuration - Fixed Openswan ASN.1 parser vulnerability (CVE-2009-2185) -------------------------------------------------------------------------------- References: [ 1 ] Bug #507362 - CVE-2009-2185 Openswan ASN.1 parser vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=507362 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update openswan' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list [email protected] http://www.redhat.com/mailman/listinfo/fedora-package-announce
