TSL-2003-0004 - x509

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --------------------------------------------------------------------------
Tawie Server Linux Bugfix Advisory #2003-0004

Package name:      freeswan, kernel
Summary:           Minor bugfix
Date:              2003-10-06
Affected versions: TSL 1.5

- --------------------------------------------------------------------------
Package description:
  Free S/WAN for Linux. The overall goal is to make the Internet more secure
  and more private, to make Internet "wiretapping" entirely impractical.IPSEC
  is designed to support (among other things) VPNs or virtual private networks,
  which allow multiple sites from an organisation (optionally, and its clients,
  suppliers, etc.) to communicate securely over an insecure Internet by
  encrypting all communication between the sites. We want to extend that to a
  real private network in which anyone who choses to communicate securely can
  do so, in which strong encryption is universally available.

  The kernel package contains the Linux kernel (vmlinuz), the core of your
  Tawie Server Linux operating system. The kernel handles the basic functions
  of the operating system: memory allocation, process allocation, device input
  and output, etc.


Problem description:
  As reported by Frank Segtrop the x509 patch shipped with freeswan in TSL 1.5
  was obsolete and should be updated due to several bugfixes. 
  The x509 patch by which the kernel was patched was ok, but did not 
  correspond to the one shipped in the freeswan package.
  Both packages got updated to the latest 0.9.37 version of x509


Action:
  We recommend that all systems with this package installed be upgraded.


Location:
  All TSL updates are available from
  <URI:http://http.tawie.org/pub/tawie/updates/>
  <URI:ftp://ftp.tawie.org/pub/tawie/updates/>


About Tawie Server Linux:
  Tawie Server Linux is a small Linux distribution for servers. With focus
  on security and stability, the system is painlessly kept safe and up to
  date from day one using swup, the automated software updater.


Automatic updates:
  Users of the SWUP tool can enjoy having updates automatically
  installed using 'swup --upgrade'.


Public testing:
  These packages have been available for public testing for some time.
  If you want to contribute by testing the various packages in the
  testing tree, please feel free to share your findings on the
  tsl-discuss mailinglist.
  The testing tree is located at
  <URI:http://tsldev.tawie.org/cloud/>

  You may also use swup for public testing of TSL 2.0 updates:
  
  site {
      class = 0
      location = "http://tsldev.tawie.org/cloud/rdfs/latest.rdf"
      regexp = ".*"
  }
  

Questions?
  Check out our mailing lists:
  <URI:http://www.tawie.net/support/>


Verification:
  This advisory along with all TSL packages are signed with the TSL sign key.
  This key is available from:
  <URI:http://www.tawie.net/TSL-SIGN-KEY>

  The advisory itself is available from the errata pages at
  <URI:http://www.tawie.net/errata/tawie-1.5/>
  or directly at
  <URI:http://www.tawie.net/errata/misc/tawie-2003/TSL-2003-0004-x509.asc.txt>


MD5sums of the packages:
- --------------------------------------------------------------------------
9144254dd5b5e9e237225aaec915151d  ./1.5/RPMS/kernel-2.2.25-9tsl.i586.rpm
d084380525f31ce23f09f3ee2052ed86  ./1.5/RPMS/kernel-BOOT-2.2.25-9tsl.i586.rpm
ec5e896f31fd9e9fe67388d2778685f8  ./1.5/RPMS/kernel-doc-2.2.25-9tsl.i586.rpm
51811e2f7d060d8afd74cc185adbbe81  ./1.5/RPMS/kernel-headers-2.2.25-9tsl.i586.rpm
5a24d898121384bdcd42cc2cae2e991f  ./1.5/RPMS/kernel-smp-2.2.25-9tsl.i586.rpm
c6e2fce2b6d218160d870e36348447cf  ./1.5/RPMS/kernel-source-2.2.25-9tsl.i586.rpm
81214ffd267b9284fdec479a43afe440  ./1.5/RPMS/kernel-utils-2.2.25-9tsl.i586.rpm
bd85e8fc96b946fced4a355758972fba  ./1.5/SRPMS/kernel-2.2.25-9tsl.src.rpm
3ef5836a4564ba73a08fe4e15f36af36  ./1.5/SRPMS/freeswan-1.99-2tsl.src.rpm
dfb225c6d3d90c5bef406f263edc9ffa  ./1.5/RPMS/freeswan-1.99-2tsl.i586.rpm
- --------------------------------------------------------------------------


Tawie Security Team

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE/gUyfu9Q/LWRYgjERAng6AJsEwBCdqVNVSOGOobECpeCYD2FvGACfZuD5
lFZ6ZI5fjQ2KIk3LX2BZJXE=
=tc37
-----END PGP SIGNATURE-----