Уведомление безопасности SUSE-SA:2005:070

Критичная (7.8)

(AV:N/AC:L/Au:N/C:N/I:N/A:C)

SUSE

freeswan (any) ipsec-tools (any) openswan (any)

Уведомление безопасности об уязвимостях SUSE Linux 10.0, SUSE Linux 9.3, SUSE Linux 9.2, SUSE Linux 9.1, SUSE Linux Enterprise Server 9

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
openSUSE 10.0:
i586:
openswan - 2.4.4-1.1
ipsec-tools - 0.6-4.2
SUSE Linux 9.0 Professional, SUSE LINUX 9.0 Personal, SUSE LINUX 9.1 Professional, SUSE Linux Enterprise Server 9:
ia64:
freeswan - 2.04_1.5.4-1.23
ipsec-tools - 0.3.3-1.9
Novell Open Enterprise Server (OES), SUSE Linux 9.0 Professional, SUSE LINUX 9.0 Personal, Novell Linux Desktop 9, SUSE LINUX 9.1 Professional, SUSE Linux Enterprise Server 9, Novell Linux Point of Service 9:
i586:
freeswan - 2.04_1.5.4-1.23
ipsec-tools - 0.3.3-1.9
openSUSE 9.1:
i586:
ipsec-tools - 0.3.3-1.9
freeswan - 2.04_1.5.4-1.23
openSUSE 9.3:
i586:
openswan - 2.2.0-12.4
ipsec-tools - 0.5-5.2
openSUSE 9.2:
i586:
openswan - 2.2.0-8.4
ipsec-tools - 0.4rc1-3.4
SUSE Linux 9.0 Professional, SUSE LINUX 9.0 Personal, Novell Linux Desktop 9, SUSE LINUX 9.1 Professional, SUSE Linux Enterprise Server 9:
x86_64:
freeswan - 2.04_1.5.4-1.23
ipsec-tools - 0.3.3-1.9

https://www.suse.com/support/security/advisories/2005_70_ipsec.html

Источник: CVE
Наименование: CVE-2005-3671
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3671

Источник: CVE
Наименование: CVE-2005-3732
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3732