Scientific Linux: 2014:0185-1 Moderate: Openswan Denial Of Service

Date: Tue, 18 Feb 2014 08:32:48 -0600
Reply-To: Pat Riehecky 
Sender: Security Errata for Scientific Linux
 
From: Pat Riehecky 
Subject: FASTBUGS for SL 6x i386, x86_64 now available
MIME-Version: 1.0

The following FASTBUGS have been uploaded to

i386:
libvirt-cim-0.6.1-9.el6_5.1.i686.rpm
qemu-guest-agent-0.12.1.2-2.415.el6_5.4.i686.rpm

x86_64:
libvirt-cim-0.6.1-9.el6_5.1.i686.rpm
libvirt-cim-0.6.1-9.el6_5.1.x86_64.rpm
qemu-guest-agent-0.12.1.2-2.415.el6_5.4.x86_64.rpm
qemu-img-0.12.1.2-2.415.el6_5.4.x86_64.rpm
qemu-kvm-0.12.1.2-2.415.el6_5.4.x86_64.rpm
qemu-kvm-tools-0.12.1.2-2.415.el6_5.4.x86_64.rpm
Date: Tue, 18 Feb 2014 20:01:47 +0000
Reply-To: scientific-linux-users@
Sender: Security Errata for Scientific Linux
 
From: Pat Riehecky 
Subject: Security ERRATA Moderate: openswan on SL5.x, SL6.x i386/x86_64
MIME-Version: 1.0

Synopsis: Moderate: openswan security update
Advisory ID: SLSA-2014:0185-1
Issue Date: 2014-02-18
CVE Numbers: CVE-2013-6466
--

A NULL pointer dereference flaw was discovered in the way Openswan's IKE
daemon processed IKEv2 payloads. A remote attacker could send specially
crafted IKEv2 payloads that, when processed, would lead to a denial of
service (daemon crash), possibly causing existing VPN connections to be
dropped. (CVE-2013-6466)
--

SL5
 x86_64
 openswan-2.6.32-7.3.el5_10.x86_64.rpm
 openswan-debuginfo-2.6.32-7.3.el5_10.x86_64.rpm
 openswan-doc-2.6.32-7.3.el5_10.x86_64.rpm
 i386
 openswan-2.6.32-7.3.el5_10.i386.rpm
 openswan-debuginfo-2.6.32-7.3.el5_10.i386.rpm
 openswan-doc-2.6.32-7.3.el5_10.i386.rpm
SL6
 x86_64
 openswan-2.6.32-27.2.el6_5.x86_64.rpm
 openswan-debuginfo-2.6.32-27.2.el6_5.x86_64.rpm
 openswan-doc-2.6.32-27.2.el6_5.x86_64.rpm
 i386
 openswan-2.6.32-27.2.el6_5.i686.rpm
 openswan-debuginfo-2.6.32-27.2.el6_5.i686.rpm
 openswan-doc-2.6.32-27.2.el6_5.i686.rpm

- Scientific Linux Development Team