| commit | 8963207bf6837fb19ff811d87486cf10d790cc38 | |
| author | Gustavo Zacarias <gustavo@zacarias.com.ar> | |
| Mon, 16 Nov 2015 19:55:06 +0000 (16 16:55 -0300) | ||
| committer | Thomas Petazzoni <thomas.petazzoni@free-electrons.com> | |
| Mon, 16 Nov 2015 20:14:59 +0000 (16 21:14 +0100) | ||
| tree | 74b6fffae29d279ee4667518b6aa80828f62806c | treesnapshot (tar.gz zip) |
| parent | 8a3478d9b6c19fbbfb9e2c1058b570c868062ebd | commitdiff |
strongswan: security bump to version 5.3.4
Fixes:
CVE-2015-8023 - authentication bypass vulnerability in the eap-mschapv2
plugin that was caused by insufficient verification of the internal
state when handling EAP-MSCHAPv2 Success messages received by the
client.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Fixes:
CVE-2015-8023 - authentication bypass vulnerability in the eap-mschapv2
plugin that was caused by insufficient verification of the internal
state when handling EAP-MSCHAPv2 Success messages received by the
client.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
| package/strongswan/strongswan.hash | diffblobblamehistory | |
| package/strongswan/strongswan.mk | diffblobblamehistory |