Ubuntu 15.04, 14.10, 14.04 LTS: 2628-1 Moderate strongSwan Vulnerability

ubuntu

June 8, 2015

strongSwan could be made to expose sensitive information over the network.

Summary

strongSwan could be made to expose sensitive information over the network.

Software Description:

- strongswan: IPsec VPN solution

Details:

Alexander E. Patrakov discovered that strongSwan incorrectly handled

certain IKEv2 setups. A malicious server could possibly use this issue to

obtain user credentials.

Topics Covered

security advisory ubuntu update instruction network exposure strongswan

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.04:
  strongswan-ike                  5.1.2-0ubuntu5.2

Ubuntu 14.10:
  strongswan-ike                  5.1.2-0ubuntu3.3

Ubuntu 14.04 LTS:
  strongswan-ike                  5.1.2-0ubuntu2.3

In general, a standard system update will make all the necessary changes.