Skip to contentSkip to conversation

strongswan: security bump to version 5.3.2

PATCH New Gustavo Zacarias 2 participants 2 messages Jun 8, 2015 – Jun 9, 2015

lore
Share & tools
lore

Gustavo Zacarias

author
#0 lore raw

PATCH 1/1 strongswan: security bump to version 5.3.2

Fixes:

CVE-2015-4171 - rogue servers with a valid certificate accepted by the client to trick it into disclosing its username and even password (if the client accepts EAP-GTC).

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/strongswan/strongswan.hash | 4 ++--
 package/strongswan/strongswan.mk   | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)
package/strongswan/strongswan.hash +2 -2
index e38c736..8b31de4 100644
@@ -1,2 +1,2 @@
-# From http://download.strongswan.org/strongswan-5.3.1.tar.bz2.md5
-md5	66f258901a3d6c271da1a0c7fb3e5013	strongswan-5.3.1.tar.bz2
+# From http://download.strongswan.org/strongswan-5.3.2.tar.bz2.md5
+md5	fab014be1477ef4ebf9a765e10f8802c	strongswan-5.3.2.tar.bz2
package/strongswan/strongswan.mk +1 -1
index f165eb1..47a28a3 100644
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-STRONGSWAN_VERSION = 5.3.1
+STRONGSWAN_VERSION = 5.3.2
 STRONGSWAN_SOURCE = strongswan-$(STRONGSWAN_VERSION).tar.bz2
 STRONGSWAN_SITE = http://download.strongswan.org
 STRONGSWAN_LICENSE = GPLv2+
Signature · 1 line
2.3.6
Applied
#1 lore raw

PATCH 1/1 strongswan: security bump to version 5.3.2

Dear Gustavo Zacarias,

Quoted 11 lines · Gustavo Zacarias

Fixes:

CVE-2015-4171 - rogue servers with a valid certificate accepted by the client to trick it into disclosing its username and even password (if the client accepts EAP-GTC).

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/strongswan/strongswan.hash | 4 ++--
 package/strongswan/strongswan.mk   | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

Applied, thanks.

Thomas

Signature · 3 lines
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com