Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 37 FEDORA-2023-42ec148952 Critical: Libreswan 4.10 IPsec Update

fedora
Calendar Grey April 22, 2023
Dist Fedora Esm H88
Fedora 37 recently released an update that tackles CVE-2023-23009, improving the security of the libreswan 4.10 VPN implementation.
Update to 4.10 for CVE-2023-23009

Summary

Libreswan is a free implementation of IPsec & IKE for Linux. IPsec is

the Internet Protocol Security and uses strong cryptography to provide

both authentication and encryption services. These services allow you

to build secure tunnels through untrusted networks. Everything passing

through the untrusted net is encrypted by the ipsec gateway machine and

decrypted by the gateway at the other end of the tunnel. The resulting

tunnel is a virtual private network or VPN.

This package contains the daemons and userland tools for setting up

Libreswan.

Libreswan also supports IKEv2 (RFC7296) and Secure Labeling

Libreswan is based on Openswan-2.6.38 which in turn is based on FreeS/WAN-2.04

Update to 4.10 for CVE-2023-23009

* Wed Mar 1 2023 Paul Wouters

- Update to 4.10 for CVE-2023-23009

* Thu Jan 19 2023 Fedora Release Engineering - 4.9-2.1

- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild

* Tue Jan 10 2023 Paul Wouters

- Use new GPG key location.

su -c 'dnf upgrade --advisory FEDORA-2023-42ec148952' at the command

line. For more information, refer to the dnf documentation available at

http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/keys

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org

Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 37
Version: 4.10
Release: 1.fc37
Summary: Internet Key Exchange (IKEv1 and IKEv2) implementation for IPsec

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here