From 2ffad259afdc37842a98840fffb0bd6c6299096b Mon Sep 17 00:00:00 2001 From: hwdsl2 Date: Tue, 11 Jan 2022 22:20:57 -0600 Subject: [PATCH] New Libreswan version - Use new Libreswan version 4.6. - Libreswan 4.6 contains a fix for CVE-2022-23094. See the following links for more information. https://lists.libreswan.org/pipermail/swan-announce/2022/000046.html https://libreswan.org/security/ --- vpnsetup_alpine.sh | 2 +- vpnsetup_amzn.sh | 2 +- vpnsetup_centos.sh | 2 +- vpnsetup_ubuntu.sh | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/vpnsetup_alpine.sh b/vpnsetup_alpine.sh index a3fdf58..ae7e8c7 100755 --- a/vpnsetup_alpine.sh +++ b/vpnsetup_alpine.sh @@ -185,7 +185,7 @@ get_ikev2_script() { } check_libreswan() { - SWAN_VER=4.5 + SWAN_VER=4.6 ipsec_ver=$(/usr/local/sbin/ipsec --version 2>/dev/null) swan_ver_old=$(printf '%s' "$ipsec_ver" | sed -e 's/.*Libreswan U\?//' -e 's/\( (\|\/K\).*//') [ "$swan_ver_old" = "$SWAN_VER" ] diff --git a/vpnsetup_amzn.sh b/vpnsetup_amzn.sh index 875fa7d..dc18d53 100755 --- a/vpnsetup_amzn.sh +++ b/vpnsetup_amzn.sh @@ -185,7 +185,7 @@ get_ikev2_script() { } check_libreswan() { - SWAN_VER=4.5 + SWAN_VER=4.6 ipsec_ver=$(/usr/local/sbin/ipsec --version 2>/dev/null) swan_ver_old=$(printf '%s' "$ipsec_ver" | sed -e 's/.*Libreswan U\?//' -e 's/\( (\|\/K\).*//') [ "$swan_ver_old" = "$SWAN_VER" ] diff --git a/vpnsetup_centos.sh b/vpnsetup_centos.sh index eb7b637..0a2113c 100755 --- a/vpnsetup_centos.sh +++ b/vpnsetup_centos.sh @@ -240,7 +240,7 @@ get_ikev2_script() { } check_libreswan() { - SWAN_VER=4.5 + SWAN_VER=4.6 ipsec_ver=$(/usr/local/sbin/ipsec --version 2>/dev/null) swan_ver_old=$(printf '%s' "$ipsec_ver" | sed -e 's/.*Libreswan U\?//' -e 's/\( (\|\/K\).*//') [ "$swan_ver_old" = "$SWAN_VER" ] diff --git a/vpnsetup_ubuntu.sh b/vpnsetup_ubuntu.sh index 49c5c04..41b0ac7 100755 --- a/vpnsetup_ubuntu.sh +++ b/vpnsetup_ubuntu.sh @@ -223,7 +223,7 @@ get_ikev2_script() { } check_libreswan() { - SWAN_VER=4.5 + SWAN_VER=4.6 ipsec_ver=$(/usr/local/sbin/ipsec --version 2>/dev/null) swan_ver_old=$(printf '%s' "$ipsec_ver" | sed -e 's/.*Libreswan U\?//' -e 's/\( (\|\/K\).*//') [ "$swan_ver_old" = "$SWAN_VER" ]