Summary:

The Precise is in main but not affected.

Xenial onwards, the package is in universe because Ubuntu switched to
favoring strongswan due in part to the upstream deprecation of racoon.
That, at the time of release of Trusty and onwards, comprised our
recommendation that users switch to strongswan for IPsec support. ipsec-
tools/racoon is maintained since then by community volunteers only.

If you'd like to patch Xenial for the CVE, then please see
https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures and
https://wiki.ubuntu.com/SecurityTeam/SponsorsQueue for details on how to
contribute that.

If you'd like to patch Bionic to fix the regression, then please see
https://wiki.ubuntu.com/StableReleaseUpdates#Procedure for details on
how to contribute this.

Note that in both cases someone needs to volunteer appropriate testing
and consideration of others' use cases to successfully get a fix landed
in Ubuntu.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1793028

Title:
  [SRU] NetBSD CVE Patch Regression

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ipsec-tools/+bug/1793028/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to