Fedora Core 4: 2005-198 High: OpenSSL Vulnerability Exploit Risk

This is the IPsec-Tools package. You need this package in order to

really use the IPsec functionality in the linux-2.5+ kernels. This

package builds:

- libipsec, a PFKeyV2 library

- setkey, a program to directly manipulate policies and SAs

- racoon, an IKEv1 keying daemon

When configured to use X.509 certificates to authenticate remote hosts, ipsec-tools versions 0.3.3 and earlier will attempt to verify that host certificate, but will not abort the key exchange if the verification fails.

Users of ipsec-tools should upgrade to this updated package which contains a backported security patch and is not vulnerable to this issue.

* Fri Jun 25 2004 Nalin Dahyabhai <nalin@redhat.com> 0.2.5-4

- backport certificate validation fixes from 0.3.3 (#126568)

* Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>

- rebuilt

This update can be downloaded from:

a37bb0893daee1ebecfb9ec03d7df542 SRPMS/ipsec-tools-0.2.5-4.src.rpm 2d2773ae7faee29982e87d26aea76803 x86_64/ipsec-tools-0.2.5-4.x86_64.rpm 79bcd6d5050b207492080e70fe7c04c6 x86_64/debug/ipsec-tools-debuginfo-0.2.5-4.x86_64.rpm e9c0a5fef2720246a1751f6e88befd77 i386/ipsec-tools-0.2.5-4.i386.rpm 6abfadc474494cf9393364b78488b321 i386/debug/ipsec-tools-debuginfo-0.2.5-4.i386.rpm

This update can also be i...