[Openswan Users] [USN-450-1] ipsec-tools vulnerability (fwd)

[Jacco de Leeuw]

Paul Wouters wrote:

> FYI, since some people will be running racoon as well as openswan.
> 
> Unfortunately, this announcement does not contain CVE numbers, so I do
> not yet know more about this flaw, and whether openswan would be
> vulnerable to this as well.

The advisory does not say who informed the Ubuntu team about this
flaw. It doesn't look like a Ubuntu-only flaw. Mac OS X appears to
be vulnerable as well, for one.

Jacco
-- 
Jacco de Leeuw                         mailto:jacco2 at dds.nl
Zaandam, The Netherlands           http://www.jacco2.dds.nl