Security update for strongswan SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:3266-1 Final 1 1 2019-12-11T10:19:12Z current 2019-12-11T10:19:12Z 2019-12-11T10:19:12Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for strongswan This update for strongswan provides the following fixes: Security issues fixed: - CVE-2018-5388: Fixed a buffer underflow which may allow to a remote attacker with local user credentials to resource exhaustion and denial of service while reading from the socket (bsc#1094462). - CVE-2018-10811: Fixed a denial of service during the IKEv2 key derivation if the openssl plugin is used in FIPS mode and HMAC-MD5 is negotiated as PRF (bsc#1093536). - CVE-2018-16151,CVE-2018-16152: Fixed multiple flaws in the gmp plugin which might lead to authorization bypass (bsc#1107874). - CVE-2018-17540: Fixed an improper input validation in gmp plugin (bsc#1109845). Other issues addressed: - Fixed some client fails when the scep server URL is used with HTTPS protocol (bsc#1071853). - Reject Diffie-Hellman key exchanges using primes smaller than 1024 bit. - Handle unexpected informational message from SonicWall. (bsc#1009254) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2019-3266,SUSE-OpenStack-Cloud-7-2019-3266,SUSE-OpenStack-Cloud-8-2019-3266,SUSE-SLE-DESKTOP-12-SP4-2019-3266,SUSE-SLE-SAP-12-SP1-2019-3266,SUSE-SLE-SAP-12-SP2-2019-3266,SUSE-SLE-SAP-12-SP3-2019-3266,SUSE-SLE-SERVER-12-SP1-2019-3266,SUSE-SLE-SERVER-12-SP2-2019-3266,SUSE-SLE-SERVER-12-SP2-BCL-2019-3266,SUSE-SLE-SERVER-12-SP3-2019-3266,SUSE-SLE-SERVER-12-SP3-BCL-2019-3266,SUSE-SLE-SERVER-12-SP4-2019-3266,SUSE-SLE-SERVER-12-SP5-2019-3266,SUSE-Storage-5-2019-3266 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20193266-1/ Link for SUSE-SU-2019:3266-1 https://lists.suse.com/pipermail/sle-security-updates/2019-December/006239.html E-Mail link for SUSE-SU-2019:3266-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1009254 SUSE Bug 1009254 https://bugzilla.suse.com/1071853 SUSE Bug 1071853 https://bugzilla.suse.com/1093536 SUSE Bug 1093536 https://bugzilla.suse.com/1094462 SUSE Bug 1094462 https://bugzilla.suse.com/1107874 SUSE Bug 1107874 https://bugzilla.suse.com/1109845 SUSE Bug 1109845 https://www.suse.com/security/cve/CVE-2018-10811/ SUSE CVE CVE-2018-10811 page https://www.suse.com/security/cve/CVE-2018-16151/ SUSE CVE CVE-2018-16151 page https://www.suse.com/security/cve/CVE-2018-16152/ SUSE CVE CVE-2018-16152 page https://www.suse.com/security/cve/CVE-2018-17540/ SUSE CVE CVE-2018-17540 page https://www.suse.com/security/cve/CVE-2018-5388/ SUSE CVE CVE-2018-5388 page SUSE Enterprise Storage 5 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 strongswan-5.1.3-26.13.1 strongswan-cavs-5.1.3-26.13.1 strongswan-doc-5.1.3-26.13.1 strongswan-hmac-5.1.3-26.13.1 strongswan-ipsec-5.1.3-26.13.1 strongswan-libs0-5.1.3-26.13.1 strongswan-mysql-5.1.3-26.13.1 strongswan-nm-5.1.3-26.13.1 strongswan-sqlite-5.1.3-26.13.1 strongswan-5.1.3-26.13.1 as a component of SUSE Enterprise Storage 5 strongswan-doc-5.1.3-26.13.1 as a component of SUSE Enterprise Storage 5 strongswan-hmac-5.1.3-26.13.1 as a component of SUSE Enterprise Storage 5 strongswan-ipsec-5.1.3-26.13.1 as a component of SUSE Enterprise Storage 5 strongswan-libs0-5.1.3-26.13.1 as a component of SUSE Enterprise Storage 5 strongswan-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 strongswan-doc-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 strongswan-ipsec-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 strongswan-libs0-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 strongswan-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS strongswan-doc-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS strongswan-hmac-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS strongswan-ipsec-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS strongswan-libs0-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS strongswan-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL strongswan-doc-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL strongswan-hmac-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL strongswan-ipsec-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL strongswan-libs0-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL strongswan-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS strongswan-doc-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS strongswan-hmac-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS strongswan-ipsec-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS strongswan-libs0-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS strongswan-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL strongswan-doc-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL strongswan-hmac-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL strongswan-ipsec-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL strongswan-libs0-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL strongswan-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS strongswan-doc-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS strongswan-hmac-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS strongswan-ipsec-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS strongswan-libs0-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS strongswan-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP4 strongswan-doc-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP4 strongswan-hmac-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP4 strongswan-ipsec-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP4 strongswan-libs0-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP4 strongswan-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP5 strongswan-doc-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP5 strongswan-hmac-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP5 strongswan-ipsec-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP5 strongswan-libs0-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server 12 SP5 strongswan-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 strongswan-doc-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 strongswan-hmac-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 strongswan-ipsec-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 strongswan-libs0-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 strongswan-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 strongswan-doc-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 strongswan-hmac-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 strongswan-ipsec-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 strongswan-libs0-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 strongswan-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 strongswan-doc-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 strongswan-hmac-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 strongswan-ipsec-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 strongswan-libs0-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 strongswan-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 strongswan-doc-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 strongswan-hmac-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 strongswan-ipsec-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 strongswan-libs0-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 strongswan-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 strongswan-doc-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 strongswan-hmac-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 strongswan-ipsec-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 strongswan-libs0-5.1.3-26.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 strongswan-5.1.3-26.13.1 as a component of SUSE OpenStack Cloud 7 strongswan-doc-5.1.3-26.13.1 as a component of SUSE OpenStack Cloud 7 strongswan-hmac-5.1.3-26.13.1 as a component of SUSE OpenStack Cloud 7 strongswan-ipsec-5.1.3-26.13.1 as a component of SUSE OpenStack Cloud 7 strongswan-libs0-5.1.3-26.13.1 as a component of SUSE OpenStack Cloud 7 strongswan-5.1.3-26.13.1 as a component of SUSE OpenStack Cloud 8 strongswan-doc-5.1.3-26.13.1 as a component of SUSE OpenStack Cloud 8 strongswan-hmac-5.1.3-26.13.1 as a component of SUSE OpenStack Cloud 8 strongswan-ipsec-5.1.3-26.13.1 as a component of SUSE OpenStack Cloud 8 strongswan-libs0-5.1.3-26.13.1 as a component of SUSE OpenStack Cloud 8 strongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a Variable. CVE-2018-10811 SUSE Enterprise Storage 5:strongswan-5.1.3-26.13.1 SUSE Enterprise Storage 5:strongswan-doc-5.1.3-26.13.1 SUSE Enterprise Storage 5:strongswan-hmac-5.1.3-26.13.1 SUSE Enterprise Storage 5:strongswan-ipsec-5.1.3-26.13.1 SUSE Enterprise Storage 5:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Desktop 12 SP4:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Desktop 12 SP4:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Desktop 12 SP4:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Desktop 12 SP4:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-BCL:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-BCL:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-BCL:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-BCL:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-BCL:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-LTSS:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-LTSS:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-LTSS:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-LTSS:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-LTSS:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-BCL:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-BCL:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-BCL:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-BCL:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-BCL:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-LTSS:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-LTSS:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-LTSS:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-LTSS:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-LTSS:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP4:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP4:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP4:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP4:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP4:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP5:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP5:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP5:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP5:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP5:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:strongswan-libs0-5.1.3-26.13.1 SUSE OpenStack Cloud 7:strongswan-5.1.3-26.13.1 SUSE OpenStack Cloud 7:strongswan-doc-5.1.3-26.13.1 SUSE OpenStack Cloud 7:strongswan-hmac-5.1.3-26.13.1 SUSE OpenStack Cloud 7:strongswan-ipsec-5.1.3-26.13.1 SUSE OpenStack Cloud 7:strongswan-libs0-5.1.3-26.13.1 SUSE OpenStack Cloud 8:strongswan-5.1.3-26.13.1 SUSE OpenStack Cloud 8:strongswan-doc-5.1.3-26.13.1 SUSE OpenStack Cloud 8:strongswan-hmac-5.1.3-26.13.1 SUSE OpenStack Cloud 8:strongswan-ipsec-5.1.3-26.13.1 SUSE OpenStack Cloud 8:strongswan-libs0-5.1.3-26.13.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20193266-1/ https://www.suse.com/security/cve/CVE-2018-10811.html CVE-2018-10811 https://bugzilla.suse.com/1093536 SUSE Bug 1093536 In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation based on GMP does not reject excess data after the encoded algorithm OID during PKCS#1 v1.5 signature verification. Similar to the flaw in the same version of strongSwan regarding digestAlgorithm.parameters, a remote attacker can forge signatures when small public exponents are being used, which could lead to impersonation when only an RSA signature is used for IKEv2 authentication. CVE-2018-16151 SUSE Enterprise Storage 5:strongswan-5.1.3-26.13.1 SUSE Enterprise Storage 5:strongswan-doc-5.1.3-26.13.1 SUSE Enterprise Storage 5:strongswan-hmac-5.1.3-26.13.1 SUSE Enterprise Storage 5:strongswan-ipsec-5.1.3-26.13.1 SUSE Enterprise Storage 5:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Desktop 12 SP4:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Desktop 12 SP4:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Desktop 12 SP4:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Desktop 12 SP4:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-BCL:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-BCL:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-BCL:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-BCL:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-BCL:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-LTSS:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-LTSS:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-LTSS:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-LTSS:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-LTSS:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-BCL:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-BCL:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-BCL:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-BCL:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-BCL:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-LTSS:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-LTSS:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-LTSS:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-LTSS:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-LTSS:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP4:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP4:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP4:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP4:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP4:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP5:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP5:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP5:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP5:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP5:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:strongswan-libs0-5.1.3-26.13.1 SUSE OpenStack Cloud 7:strongswan-5.1.3-26.13.1 SUSE OpenStack Cloud 7:strongswan-doc-5.1.3-26.13.1 SUSE OpenStack Cloud 7:strongswan-hmac-5.1.3-26.13.1 SUSE OpenStack Cloud 7:strongswan-ipsec-5.1.3-26.13.1 SUSE OpenStack Cloud 7:strongswan-libs0-5.1.3-26.13.1 SUSE OpenStack Cloud 8:strongswan-5.1.3-26.13.1 SUSE OpenStack Cloud 8:strongswan-doc-5.1.3-26.13.1 SUSE OpenStack Cloud 8:strongswan-hmac-5.1.3-26.13.1 SUSE OpenStack Cloud 8:strongswan-ipsec-5.1.3-26.13.1 SUSE OpenStack Cloud 8:strongswan-libs0-5.1.3-26.13.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20193266-1/ https://www.suse.com/security/cve/CVE-2018-16151.html CVE-2018-16151 https://bugzilla.suse.com/1107874 SUSE Bug 1107874 https://bugzilla.suse.com/1109845 SUSE Bug 1109845 In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation based on GMP does not reject excess data in the digestAlgorithm.parameters field during PKCS#1 v1.5 signature verification. Consequently, a remote attacker can forge signatures when small public exponents are being used, which could lead to impersonation when only an RSA signature is used for IKEv2 authentication. This is a variant of CVE-2006-4790 and CVE-2014-1568. CVE-2018-16152 SUSE Enterprise Storage 5:strongswan-5.1.3-26.13.1 SUSE Enterprise Storage 5:strongswan-doc-5.1.3-26.13.1 SUSE Enterprise Storage 5:strongswan-hmac-5.1.3-26.13.1 SUSE Enterprise Storage 5:strongswan-ipsec-5.1.3-26.13.1 SUSE Enterprise Storage 5:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Desktop 12 SP4:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Desktop 12 SP4:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Desktop 12 SP4:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Desktop 12 SP4:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-BCL:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-BCL:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-BCL:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-BCL:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-BCL:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-LTSS:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-LTSS:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-LTSS:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-LTSS:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-LTSS:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-BCL:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-BCL:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-BCL:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-BCL:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-BCL:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-LTSS:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-LTSS:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-LTSS:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-LTSS:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-LTSS:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP4:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP4:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP4:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP4:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP4:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP5:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP5:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP5:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP5:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP5:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:strongswan-libs0-5.1.3-26.13.1 SUSE OpenStack Cloud 7:strongswan-5.1.3-26.13.1 SUSE OpenStack Cloud 7:strongswan-doc-5.1.3-26.13.1 SUSE OpenStack Cloud 7:strongswan-hmac-5.1.3-26.13.1 SUSE OpenStack Cloud 7:strongswan-ipsec-5.1.3-26.13.1 SUSE OpenStack Cloud 7:strongswan-libs0-5.1.3-26.13.1 SUSE OpenStack Cloud 8:strongswan-5.1.3-26.13.1 SUSE OpenStack Cloud 8:strongswan-doc-5.1.3-26.13.1 SUSE OpenStack Cloud 8:strongswan-hmac-5.1.3-26.13.1 SUSE OpenStack Cloud 8:strongswan-ipsec-5.1.3-26.13.1 SUSE OpenStack Cloud 8:strongswan-libs0-5.1.3-26.13.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20193266-1/ https://www.suse.com/security/cve/CVE-2018-16152.html CVE-2018-16152 https://bugzilla.suse.com/1107874 SUSE Bug 1107874 The gmp plugin in strongSwan before 5.7.1 has a Buffer Overflow via a crafted certificate. CVE-2018-17540 SUSE Enterprise Storage 5:strongswan-5.1.3-26.13.1 SUSE Enterprise Storage 5:strongswan-doc-5.1.3-26.13.1 SUSE Enterprise Storage 5:strongswan-hmac-5.1.3-26.13.1 SUSE Enterprise Storage 5:strongswan-ipsec-5.1.3-26.13.1 SUSE Enterprise Storage 5:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Desktop 12 SP4:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Desktop 12 SP4:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Desktop 12 SP4:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Desktop 12 SP4:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-BCL:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-BCL:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-BCL:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-BCL:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-BCL:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-LTSS:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-LTSS:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-LTSS:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-LTSS:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-LTSS:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-BCL:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-BCL:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-BCL:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-BCL:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-BCL:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-LTSS:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-LTSS:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-LTSS:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-LTSS:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-LTSS:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP4:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP4:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP4:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP4:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP4:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP5:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP5:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP5:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP5:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP5:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:strongswan-libs0-5.1.3-26.13.1 SUSE OpenStack Cloud 7:strongswan-5.1.3-26.13.1 SUSE OpenStack Cloud 7:strongswan-doc-5.1.3-26.13.1 SUSE OpenStack Cloud 7:strongswan-hmac-5.1.3-26.13.1 SUSE OpenStack Cloud 7:strongswan-ipsec-5.1.3-26.13.1 SUSE OpenStack Cloud 7:strongswan-libs0-5.1.3-26.13.1 SUSE OpenStack Cloud 8:strongswan-5.1.3-26.13.1 SUSE OpenStack Cloud 8:strongswan-doc-5.1.3-26.13.1 SUSE OpenStack Cloud 8:strongswan-hmac-5.1.3-26.13.1 SUSE OpenStack Cloud 8:strongswan-ipsec-5.1.3-26.13.1 SUSE OpenStack Cloud 8:strongswan-libs0-5.1.3-26.13.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20193266-1/ https://www.suse.com/security/cve/CVE-2018-17540.html CVE-2018-17540 https://bugzilla.suse.com/1107874 SUSE Bug 1107874 https://bugzilla.suse.com/1109845 SUSE Bug 1109845 In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket. CVE-2018-5388 SUSE Enterprise Storage 5:strongswan-5.1.3-26.13.1 SUSE Enterprise Storage 5:strongswan-doc-5.1.3-26.13.1 SUSE Enterprise Storage 5:strongswan-hmac-5.1.3-26.13.1 SUSE Enterprise Storage 5:strongswan-ipsec-5.1.3-26.13.1 SUSE Enterprise Storage 5:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Desktop 12 SP4:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Desktop 12 SP4:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Desktop 12 SP4:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Desktop 12 SP4:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP1-LTSS:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-BCL:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-BCL:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-BCL:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-BCL:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-BCL:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-LTSS:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-LTSS:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-LTSS:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-LTSS:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP2-LTSS:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-BCL:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-BCL:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-BCL:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-BCL:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-BCL:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-LTSS:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-LTSS:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-LTSS:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-LTSS:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP3-LTSS:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP4:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP4:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP4:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP4:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP4:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP5:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP5:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP5:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP5:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server 12 SP5:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:strongswan-libs0-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:strongswan-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:strongswan-doc-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:strongswan-hmac-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:strongswan-ipsec-5.1.3-26.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:strongswan-libs0-5.1.3-26.13.1 SUSE OpenStack Cloud 7:strongswan-5.1.3-26.13.1 SUSE OpenStack Cloud 7:strongswan-doc-5.1.3-26.13.1 SUSE OpenStack Cloud 7:strongswan-hmac-5.1.3-26.13.1 SUSE OpenStack Cloud 7:strongswan-ipsec-5.1.3-26.13.1 SUSE OpenStack Cloud 7:strongswan-libs0-5.1.3-26.13.1 SUSE OpenStack Cloud 8:strongswan-5.1.3-26.13.1 SUSE OpenStack Cloud 8:strongswan-doc-5.1.3-26.13.1 SUSE OpenStack Cloud 8:strongswan-hmac-5.1.3-26.13.1 SUSE OpenStack Cloud 8:strongswan-ipsec-5.1.3-26.13.1 SUSE OpenStack Cloud 8:strongswan-libs0-5.1.3-26.13.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20193266-1/ https://www.suse.com/security/cve/CVE-2018-5388.html CVE-2018-5388 https://bugzilla.suse.com/1094462 SUSE Bug 1094462 https://bugzilla.suse.com/1101792 SUSE Bug 1101792