An ipsec-tools update has been released for Fedora Core 2

---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-197
2004-06-28
---------------------------------------------------------------------

Product : Fedora Core 2
Name : ipsec-tools
Version : 0.2.5

Release : 4

Summary : Tools for configuring and using IPSEC
Description :
This is the IPsec-Tools package. You need this package in order to really use the IPsec functionality in the linux-2.5+ kernels. This package builds:

- libipsec, a PFKeyV2 library
- setkey, a program to directly manipulate policies and SAs
- racoon, an IKEv1 keying daemon



---------------------------------------------------------------------
Update Information:

When configured to use X.509 certificates to authenticate remote hosts, ipsec-tools versions 0.3.3 and earlier will attempt to verify that host certificate, but will not abort the key exchange if the verification fails.

Users of ipsec-tools should upgrade to this updated package which contains a backported security patch and is not vulnerable to this issue.
---------------------------------------------------------------------

* Fri Jun 25 2004 Nalin Dahyabhai nalin@redhat.com 0.2.5-4

- backport certificate validation fixes from 0.3.3 (#126568)

* Tue Jun 15 2004 Elliot Lee sopwith@redhat.com

- rebuilt

---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

a37bb0893daee1ebecfb9ec03d7df542 SRPMS/ipsec-tools-0.2.5-4.src.rpm
2d2773ae7faee29982e87d26aea76803 x86_64/ipsec-tools-0.2.5-4.x86_64.rpm
79bcd6d5050b207492080e70fe7c04c6 x86_64/debug/ipsec-tools-debuginfo-0.2.5-
4.x86_64.rpm
e9c0a5fef2720246a1751f6e88befd77 i386/ipsec-tools-0.2.5-4.i386.rpm
6abfadc474494cf9393364b78488b321 i386/debug/ipsec-tools-debuginfo-0.2.5-4.
i386.rpm

This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command.