=========================================================== 
Ubuntu Security Notice USN-641-1         September 09, 2008
ipsec-tools vulnerabilities
CVE-2008-3651, CVE-2008-3652
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 6.06 LTS
Ubuntu 7.04
Ubuntu 7.10
Ubuntu 8.04 LTS

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 6.06 LTS:
  racoon                          1:0.6.5-4ubuntu1.2

Ubuntu 7.04:
  racoon                          1:0.6.6-3ubuntu3.1

Ubuntu 7.10:
  racoon                          1:0.6.6-3.1ubuntu3.1

Ubuntu 8.04 LTS:
  racoon                          1:0.6.7-1.1ubuntu1.1

In general, a standard system upgrade is sufficient to effect the
necessary changes.

Details follow:

It was discovered that there were multiple ways to leak memory during
the IKE negotiation when handling certain packets.  If a remote attacker
sent repeated malicious requests, the "racoon" key exchange server could
allocate large amounts of memory, possibly leading to a denial of service.


Updated packages for Ubuntu 6.06 LTS:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/ipsec-tools_0.6.5-4ubuntu1.2.diff.gz
      Size/MD5:    47976 6638ae6b7edc7671f77af5b93763de0d
    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/ipsec-tools_0.6.5-4ubuntu1.2.dsc
      Size/MD5:      750 7d87380c510f48a35da9333fbfaf6629
    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/ipsec-tools_0.6.5.orig.tar.gz
      Size/MD5:   914466 168076243c023782d3fb44a583d4a32c

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/ipsec-tools_0.6.5-4ubuntu1.2_amd64.deb
      Size/MD5:    89430 2750ab4633d8ae447bed5aa7971aba48
    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/racoon_0.6.5-4ubuntu1.2_amd64.deb
      Size/MD5:   342540 912a807165c43ce90d3c60cc211ec94b

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/ipsec-tools_0.6.5-4ubuntu1.2_i386.deb
      Size/MD5:    82876 5958ed679926590d81b53ecf8c651331
    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/racoon_0.6.5-4ubuntu1.2_i386.deb
      Size/MD5:   311398 ef1a597a39f3ee88292364b037452395

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/ipsec-tools_0.6.5-4ubuntu1.2_powerpc.deb
      Size/MD5:    91124 e140993179e7d7187574bf971d6773f5
    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/racoon_0.6.5-4ubuntu1.2_powerpc.deb
      Size/MD5:   336876 9bfa3bb9da23913f4ca6161a0acc602f

  sparc architecture (Sun SPARC/UltraSPARC):

    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/ipsec-tools_0.6.5-4ubuntu1.2_sparc.deb
      Size/MD5:    86632 210608ca3d4990fb54566f6d4b3942c8
    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/racoon_0.6.5-4ubuntu1.2_sparc.deb
      Size/MD5:   316756 ad7f2ccefd4f35cb8aaf5980e53a9499

Updated packages for Ubuntu 7.04:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/ipsec-tools_0.6.6-3ubuntu3.1.diff.gz
      Size/MD5:    51311 51c0a08c38483a47bd3b2d8a73e1287f
    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/ipsec-tools_0.6.6-3ubuntu3.1.dsc
      Size/MD5:      848 50817196a867ed407f0c67f928bc2260
    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/ipsec-tools_0.6.6.orig.tar.gz
      Size/MD5:   914807 643a238e17148d242c603c511e28d029

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/ipsec-tools_0.6.6-3ubuntu3.1_amd64.deb
      Size/MD5:    91284 1780bae1fe5fdb3b907c39a876a2c419
    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/racoon_0.6.6-3ubuntu3.1_amd64.deb
      Size/MD5:   345490 cb1610211a35a5a4f8d27b962e67830b

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/ipsec-tools_0.6.6-3ubuntu3.1_i386.deb
      Size/MD5:    85700 eb95ead40564cd0965a6c256cc29cda4
    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/racoon_0.6.6-3ubuntu3.1_i386.deb
      Size/MD5:   321292 338faec788865311b18ffe8aa9424ae5

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/ipsec-tools_0.6.6-3ubuntu3.1_powerpc.deb
      Size/MD5:    95646 0b6ce9437e4255922de2ed241730aa73
    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/racoon_0.6.6-3ubuntu3.1_powerpc.deb
      Size/MD5:   347712 b7eadf3051881ee5d184aa93e0bc7f8e

  sparc architecture (Sun SPARC/UltraSPARC):

    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/ipsec-tools_0.6.6-3ubuntu3.1_sparc.deb
      Size/MD5:    89750 e47a17747bf516f28ba30b71ab762df4
    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/racoon_0.6.6-3ubuntu3.1_sparc.deb
      Size/MD5:   323440 617461a267909d50f6d0994b03f55688

Updated packages for Ubuntu 7.10:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/ipsec-tools_0.6.6-3.1ubuntu3.1.diff.gz
      Size/MD5:    54744 118e0b2e21e6fd42e7b153212f9d7847
    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/ipsec-tools_0.6.6-3.1ubuntu3.1.dsc
      Size/MD5:      852 754c5e79157f7161d03323206c402c90
    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/ipsec-tools_0.6.6.orig.tar.gz
      Size/MD5:   914807 643a238e17148d242c603c511e28d029

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/ipsec-tools_0.6.6-3.1ubuntu3.1_amd64.deb
      Size/MD5:    91780 cdeda0b4689c7051074ccfbf7757ca5b
    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/racoon_0.6.6-3.1ubuntu3.1_amd64.deb
      Size/MD5:   348172 07a71cb07b5edc9e805c716b6bdc7374

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/ipsec-tools_0.6.6-3.1ubuntu3.1_i386.deb
      Size/MD5:    86050 2224517ec375bdf2d55ddeea1afcd8bb
    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/racoon_0.6.6-3.1ubuntu3.1_i386.deb
      Size/MD5:   323010 919ef460216ef536459dd21b50483b07

  lpia architecture (Low Power Intel Architecture):

    http://ports.ubuntu.com/pool/main/i/ipsec-tools/ipsec-tools_0.6.6-3.1ubuntu3.1_lpia.deb
      Size/MD5:    86698 cf26821405e282cd0c158bef83ba75ca
    http://ports.ubuntu.com/pool/main/i/ipsec-tools/racoon_0.6.6-3.1ubuntu3.1_lpia.deb
      Size/MD5:   323408 878b1d8f4c31dd4139e4ea14e4b9fefc

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/ipsec-tools_0.6.6-3.1ubuntu3.1_powerpc.deb
      Size/MD5:    96036 037e835bb80cb35c792dce96168e502f
    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/racoon_0.6.6-3.1ubuntu3.1_powerpc.deb
      Size/MD5:   349582 3d53de0ac8a3fcf27c8a28234c363099

  sparc architecture (Sun SPARC/UltraSPARC):

    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/ipsec-tools_0.6.6-3.1ubuntu3.1_sparc.deb
      Size/MD5:    90208 7e6ae9b61a59731e5edf759da59b6443
    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/racoon_0.6.6-3.1ubuntu3.1_sparc.deb
      Size/MD5:   325398 ed029d3727b0abb6dfc5718661d3179f

Updated packages for Ubuntu 8.04 LTS:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/ipsec-tools_0.6.7-1.1ubuntu1.1.diff.gz
      Size/MD5:   263295 c9592c8529b56ee3d6b40a1e3745b4c2
    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/ipsec-tools_0.6.7-1.1ubuntu1.1.dsc
      Size/MD5:      865 e7183e67f50caf1a396570bf7a4f1e89
    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/ipsec-tools_0.6.7.orig.tar.gz
      Size/MD5:   933322 e9f38f6f12124b9c19da684c87db9fcf

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/ipsec-tools_0.6.7-1.1ubuntu1.1_amd64.deb
      Size/MD5:    91902 412eee43832542bdb31e47a8eec55a4b
    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/racoon_0.6.7-1.1ubuntu1.1_amd64.deb
      Size/MD5:   349030 bc73017cf4999c7e5f26218ef2e1e8a5

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/ipsec-tools_0.6.7-1.1ubuntu1.1_i386.deb
      Size/MD5:    86470 3496a2a6e102a029364642c5a02d49ea
    http://security.ubuntu.com/ubuntu/pool/main/i/ipsec-tools/racoon_0.6.7-1.1ubuntu1.1_i386.deb
      Size/MD5:   324144 456c9da0a86535481406445d7e0a3e18

  lpia architecture (Low Power Intel Architecture):

    http://ports.ubuntu.com/pool/main/i/ipsec-tools/ipsec-tools_0.6.7-1.1ubuntu1.1_lpia.deb
      Size/MD5:    86776 eafd43eda682ca7a99c3dcff763ea430
    http://ports.ubuntu.com/pool/main/i/ipsec-tools/racoon_0.6.7-1.1ubuntu1.1_lpia.deb
      Size/MD5:   324314 9349d9ecfb37919ac5caf4f841215a63

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://ports.ubuntu.com/pool/main/i/ipsec-tools/ipsec-tools_0.6.7-1.1ubuntu1.1_powerpc.deb
      Size/MD5:    96006 d4195e7f700808a98fb4f79c9e3fd0a9
    http://ports.ubuntu.com/pool/main/i/ipsec-tools/racoon_0.6.7-1.1ubuntu1.1_powerpc.deb
      Size/MD5:   350830 eaa04a1b7456ec1ddf95c133aee9e2c8

  sparc architecture (Sun SPARC/UltraSPARC):

    http://ports.ubuntu.com/pool/main/i/ipsec-tools/ipsec-tools_0.6.7-1.1ubuntu1.1_sparc.deb
      Size/MD5:    91072 f917354fcfa265bf5c008edea716e0ce
    http://ports.ubuntu.com/pool/main/i/ipsec-tools/racoon_0.6.7-1.1ubuntu1.1_sparc.deb
      Size/MD5:   325378 4940622cdeaf063c76b9e090987d5e89