Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 21 ipsec-tools 0.8.2 Critical: NULL Pointer Dereference Fix

fedora
Calendar Grey June 5, 2015
Dist Fedora Esm H88
Updating to ipsec-tools version 0.8.2 addresses the security vulnerability CVE-2015-4047 in Fedora 21, improving IPSEC capabilities.
Upgraded to 0.8.2, fix for CVE-2015-4047, support for Calling-Station-Id

Summary

This package contains tools necessary for establishing

keys for IPSEC connections including the rekeying during

the connection lifetime.

The main tools of this package are:

- setkey, a program to directly manipulate policies and SAs in the kernel

- racoon, an IKEv1 keying daemon

Update Information:

Upgraded to 0.8.2, fix for CVE-2015-4047, support for Calling-Station-Id

Topics%20covered

Topics Covered

security advisory critical Fedora ipsec-tools NULL pointer CVE-2015-4047

Change Log

* Tue May 26 2015 Paul Wouters - 0.8.2-1 - Upgraded to 0.8.2 - Resolves rhbz#1223420 CVE-2015-4047 NULL pointer dereference in racoon/gssapi.c - Resolves rhbz#1154906 fix port 4500 vs 500 isakmp initiator issue - Resolves rhbz#952413 Support for Calling-Station-Id attribute for xauth RADIUS requests * Fri Jan 9 2015 Paul Wouters - 0.8.1-6 - Resolves: rhbz#1029503 missing depdendency on psmisc (fixup systemd scripts)

References


[ 1 ] Bug #1223419 - CVE-2015-4047 ipsec-tools: NULL pointer dereference in racoon/gssapi.c https://bugzilla.redhat.com/show_bug.cgi?id=1223419

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update ipsec-tools' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: ipsec-tools
Product: Fedora 21
Version: 0.8.2
Release: 1.fc21
URL:
Summary: Tools for configuring and using IPSEC

Topics%20covered

Topics Covered

security advisory critical Fedora ipsec-tools NULL pointer CVE-2015-4047

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here