Important: libreswan security update
Summary
ALSA-2023:3107: Important: libreswan security update. Affects libreswan versions < 4.9-3.el8_8. Fixed in 4.9-3.el8_8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN).
Vulnerability Detail
The libreswan package in AlmaLinux 8 is affected by a security vulnerability (CVE-2023-2295) that was introduced as a regression of a previous fix (CVE-2023-30570). The impact and technical details of this vulnerability can be found on the CVE page(s) listed in the References section. It is important to address this vulnerability promptly to prevent potential unauthorized access or data breaches.
How To Fix
Minimum fixed version
4.9-3.el8_8
This is the first release that contains the fix.
sudo dnf update libreswanTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
It is crucial to update the libreswan package in AlmaLinux 8 to address this security vulnerability (CVE-2023-2295). Failure to do so may expose your system to potential unauthorized access or data breaches. If you need further assistance or support in remediation, please contact DevNack.com.
See every vulnerability recorded for libreswan →
FAQ
Libreswan is an implementation of IPsec and IKE for Linux, providing secure authentication and encryption services for building VPN tunnels.
This vulnerability can potentially lead to unauthorized access or data breaches if exploited by malicious actors.
You can use the Vulert playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your manifest file (e.g., package-lock.json) and it will provide real-time alerts for open-source vulnerabilities.
No workaround has been provided for this vulnerability. It is recommended to update the libreswan package to the fixed version.
You can find more information about this vulnerability, including its impact and technical details, on the CVE page(s) listed in the References section.
Related vulnerabilities
Recent vulnerabilities recorded for libreswan.
