Test Kennung:	1.3.6.1.4.1.25623.1.0.123094
Kategorie:	Oracle Linux Local Security Checks
Titel:	Oracle: Security Advisory (ELSA-2015-1154)
Zusammenfassung:	The remote host is missing an update for the 'libreswan' package(s) announced via the ELSA-2015-1154 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'libreswan' package(s) announced via the ELSA-2015-1154 advisory. Vulnerability Insight: [3.12-10.1.0.1] - add libreswan-oracle.patch to detect Oracle Linux distro [3.12-10.1] - Resolves: rhbz#1226407 CVE-2015-3204 libreswan: crafted IKE packet causes daemon restart [3.12-10] - Resolves: rhbz#1213652 Support CAVS [updated another prf() free symkey, bogus fips mode fix] [3.12-9] - Resolves: rhbz#1213652 Support CAVS [updated to kill another copy of prf()] - Resolves: rhbz#1208023 Libreswan with IPv6 [updated patch by Jaroslav Aster] - Resolves: rhbz#1208022 libreswan ignores module blacklist [updated modprobe handling] [3.12-8] - Resolves: rhbz#1213652 Support CAVS testing of the PRF/PRF+ functions [3.12-7] - Resolves: rhbz#1208022 libreswan ignores module blacklist rules - Resolves: rhbz#1208023 Libreswan with IPv6 in RHEL7 fails after reboot - Resolves: rhbz#1211146 pluto crashes in fips mode [3.12-6] - Resolves: rhbz#1198650 SELinux context string size limit - Resolves: rhbz#1198649 Add new option for BSI random requirement Affected Software/OS: 'libreswan' package(s) on Oracle Linux 7. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2015-3204 75392 http://www.securityfocus.com/bid/75392 GLSA-201603-13 https://security.gentoo.org/glsa/201603-13 RHSA-2015:1154 http://rhn.redhat.com/errata/RHSA-2015-1154.html https://libreswan.org/security/CVE-2015-3204/CVE-2015-3204.txt
Copyright	Copyright (C) 2015 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.