Ubuntu
ipsec-tools package

ipsec-tools 1:0.7-2.1ubuntu1.8.10.1 source package in Ubuntu

Changelog

ipsec-tools (1:0.7-2.1ubuntu1.8.10.1) intrepid-security; urgency=low

  * SECURITY UPDATE: denial of service via fragmented packets without a
    payload.
    - src/racoon/isakmp_frag.c: validate size of payload data.
    - http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/dist/ipsec-tools/src/racoon/isakmp_frag.c.diff?r1=1.4&r2=1.4.6.1&f=h
    - CVE-2009-1574
  * SECURITY UPDATE: denial of service via multiple memory leaks.
    - src/racoon/crypto_openssl.c: call X509_free().
    - src/racoon/nattraversal.c: add new natt_keepalive_delete() function
      that also frees ka->src and ka->dst.
    - http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/dist/ipsec-tools/src/racoon/crypto_openssl.c.diff?r1=1.11.6.4&r2=1.11.6.5&f=u
    - http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/dist/ipsec-tools/src/racoon/nattraversal.c.diff?r1=1.6&r2=1.6.6.1&f=u
    - CVE-2009-1632

 -- Marc Deslauriers <email address hidden>   Thu, 04 Jun 2009 14:35:06 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Intrepid
Original maintainer:
Ubuntu Development Team
Architectures:
any
Section:
net
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
ipsec-tools_0.7.orig.tar.gz 836.2 KiB eac57d9715e0645113b2ffa3b10753068e60ad4fc0bcdd254135a1d003529fba
ipsec-tools_0.7-2.1ubuntu1.8.10.1.diff.gz 64.9 KiB 7698b1cb20b2f66425d2f91a5cecf12dddfd4cb5560997af3da6bc08df3aaca1
ipsec-tools_0.7-2.1ubuntu1.8.10.1.dsc 1.2 KiB 60f30ebf58206925fd5d79b827903e01e191c5c62ba11bf32d272524dde6d15b

View changes file

Binary packages built by this source

ipsec-tools: No summary available for ipsec-tools in ubuntu intrepid.

No description available for ipsec-tools in ubuntu intrepid.

racoon: No summary available for racoon in ubuntu intrepid.

No description available for racoon in ubuntu intrepid.