Openswan: Denial of service

Background

Openswan is an implementation of IPsec for Linux.

Description

Two vulnerabilities have been found in Openswan:

• Improper permissions are used on /var/run/starter.pid and /var/lock/subsys/ipsec (CVE-2011-2147).
• Openswan contains a use-after-free error in the cryptographic helper handler (CVE-2011-4073).

Impact

A remote authenticated attacker or a local attacker may be able to cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All Openswan users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=net-misc/openswan-2.6.37"

NOTE: This is a legacy GLSA. Updates for all affected architectures are available since November 10, 2011. It is likely that your system is already no longer affected by this issue.