[BSA-061] Security Update for openswan

Harald Jenny uploaded new packages for openswan which fixed the following security problems: CVE-2011-4073 Use-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0 through 2.6.36 allows remote authenticated users to cause a denial of service pluto IKE daemo...

CVE-2011-4073

Openswan pluto IKE daemon (versions 2.3.0–2.6.36) is affected by a use-after-free in the cryptographic helper handler. This remote authenticated vulnerability can crash the daemon (DoS) via vectors in quick_outI1_continue and quick_outI1. A patch exists in Openswan 2.6.37+; upgrade to mitigate. I...

CVE-2011-4073

Use-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0 through 2.6.36 allows remote authenticated users to cause a denial of service pluto IKE daemon crash via vectors related to the 1 quickoutI1continue and 2 quickoutI1 functions...

PT-2011-1134

Name of the Vulnerable Software and Affected Versions Openswan versions 2.3.0 through 2.6.36 Description The issue is related to a use-after-free vulnerability in the cryptographic helper handler functionality. This vulnerability allows remote authenticated users to cause a denial of service,...