Libreswan @Libreswan

Third generation of IKE/IPsec software for Linux and other platforms. libreswan.org Worldwide Joined November 2012

Tweets

10K
Followers

209
Following

0
Likes

3

Libreswan @Libreswan

2 years ago

libreswan-4.14 released for (low priority) CVE-2024-2357 - Crasher on misconfiguration possible, X.509 SAN IPv6 fix, TFC padding for AEAD fix. See libreswan.org/security/ for CVE info and patches - or just upgrade to 4.14 :) Also 5.0rc2 released, so go test!

0 2 2 203 1

Libreswan @Libreswan

2 years ago

libreswan-4.12 released for CVE-2023-3871[012] - post authentication crashers on malformed packets. See libreswan.org/security/ for CVE info and patches - or just upgrade to 4.12 :)

0 2 2 193 0

Libreswan @Libreswan

2 years ago

ibreswan-4.11 released for CVE-2023-30570 - Denial of Service attack possible via unauthenticated peers when IKEv1 Aggressive Mode is in use. See libreswan.org/security/ for CVE info and patches

0 3 2 265 0

Libreswan @Libreswan

3 years ago

libreswan-4.10 released for CVE-2023-23009 - Denial of Service attack possible via authenticated peers using malformed IKEv2 TS payload download.libreswan.org/CHANGES

0 1 1 116 0

Libreswan @Libreswan

3 years ago

libreswan-4.8 released - raw ECDSA keys, CKAIDs with hardware tokens, ipsec-max-packets/bytes support nl.libreswan.org/CHANGES

0 2 1 0 0

Libreswan @Libreswan

3 years ago

libreswan-4.7 released with EAPTLS support, Android 12 interop fixes, and IPv6 support for FreeBSD/NetBSD download.libreswan.org/CHANGES

0 0 1 0 0

Libreswan @Libreswan

4 years ago

libreswan-4.6 released to address a DoS issue, see libreswan.org/security/CVE-2… for details and patches. Full changelog at download.libreswan.org/CHANGES

0 1 1 0 0

Libreswan @Libreswan

4 years ago

libreswan-4.5 released with bugfixes for IKEv2 Labeled IPsec support, improved and improved multi subnet handling download.libreswan.org/CHANGES

0 1 1 0 0

Libreswan @Libreswan

4 years ago

we have moved away from #swan at freenode to #libreswan on libera.chat

0 3 11 0 0

Libreswan @Libreswan

4 years ago

libreswan-4.4 released with bugfixes for IKEv2 Labeled IPsec support, improved IPsec over TCP support, and automated #openbsd iked interop tests :) download.libreswan.org/CHANGES

0 3 4 0 0

Libreswan @Libreswan

5 years ago

Thanks to @gsoc for selecting us again for another year of Google Summer of Code ! We are looking forward to it! summerofcode.withgoogle.com/organizations/…

0 3 2 0 0

Libreswan @Libreswan

5 years ago

libreswan-4.2 released with Labeled IPsec support, enhanced OCP features, MOBIKE/NAT fixes, improved namespaces/docker usage, compile without IKEv1 support and more: download.libreswan.org/CHANGES

0 1 5 0 0

Libreswan @Libreswan

5 years ago

libreswan-4.1 released due to interoperability bug with some Cisco devices: lists.libreswan.org/pipermail/swan… (libreswan was too harsh rejecting instead of ignoring a bogus protocol ID value that some Cisco's send)

0 2 2 0 0

Libreswan @Libreswan

5 years ago

libreswan-4.0 released with IKE/ESP over TCP support (requires kernel 5.8+), custom ikeports for OCP/k8s, INTERMEDIATE exchange support, removal of obsolete crypto, improved ipsecX device support and now fully supports NetBSD. Details: download.libreswan.org/CHANGES

0 2 5 0 0

Libreswan @Libreswan

6 years ago

We published our initial Google's Season of Docs Projects Ideas page at libreswan.org/wiki/GSoD Now is the time to point out where our documentation lacks, and what parts you found most difficult. And perhaps a professional technical writer will be able to fix it soon #SOD

0 2 0 0 0

Michael T. Babcock @mikebabcock

6 years ago

Thank your #VPN tech if you're working from home remotely today. Its a good week to have good #ipsec support. @Libreswan

0 1 2 0 0

Libreswan @Libreswan

6 years ago

libreswan-3.30 released. XFRMi virtual interface support, improved Opportunistic IPsec, improved performance. Details: download.libreswan.org/CHANGES

0 1 2 0 0

Libreswan @Libreswan

6 years ago

libreswan-3.29 released for CVE-2019-10155 which affects libreswan, openswan and (older than 2012) strongswan versions. See libreswan.org/security/CVE-2…