Skip to contentSkip to conversation

strongswan: security bump to version 5.3.4

PATCH New Gustavo Zacarias 2 participants 2 messages Nov 16, 2015

lore
Share & tools
lore

Gustavo Zacarias

author
#0 lore raw

PATCH 1/1 strongswan: security bump to version 5.3.4

Fixes:
CVE-2015-8023 - authentication bypass vulnerability in the eap-mschapv2 plugin that was caused by insufficient verification of the internal state when handling EAP-MSCHAPv2 Success messages received by the client.

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/strongswan/strongswan.hash | 6 +++---
 package/strongswan/strongswan.mk   | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)
package/strongswan/strongswan.hash +3 -3
index 5e1cf4d..4d6fd07 100644
@@ -1,4 +1,4 @@
-# From http://download.strongswan.org/strongswan-5.3.3.tar.bz2.md5
-md5	5a25f3d1c31a77ef44d14a2e7b3eaad0	strongswan-5.3.3.tar.bz2
+# From http://download.strongswan.org/strongswan-5.3.4.tar.bz2.md5
+md5	655a632a515c74a99f2e9cc337ab2f33	strongswan-5.3.4.tar.bz2
 # Calculated based on the hash above
-sha256	39d2e8f572a57a77dda8dd8bdaf2ee47ad3cefeb86bbb840d594aa75f00f33e2	strongswan-5.3.3.tar.bz2
+sha256	938ad1f7b612e039f1d32333f4865160be70f9fb3c207a31127d0168116459aa	strongswan-5.3.4.tar.bz2
package/strongswan/strongswan.mk +1 -1
index ff4c072..b4003d3 100644
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-STRONGSWAN_VERSION = 5.3.3
+STRONGSWAN_VERSION = 5.3.4
 STRONGSWAN_SOURCE = strongswan-$(STRONGSWAN_VERSION).tar.bz2
 STRONGSWAN_SITE = http://download.strongswan.org
 STRONGSWAN_LICENSE = GPLv2+
Signature · 1 line
2.4.10
Applied
#1 lore raw

PATCH 1/1 strongswan: security bump to version 5.3.4

Dear Gustavo Zacarias,

Quoted 11 lines · Gustavo Zacarias

Fixes:
CVE-2015-8023 - authentication bypass vulnerability in the eap-mschapv2 plugin that was caused by insufficient verification of the internal state when handling EAP-MSCHAPv2 Success messages received by the client.

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/strongswan/strongswan.hash | 6 +++---
 package/strongswan/strongswan.mk   | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

Applied to master, thanks.

Thomas

Signature · 3 lines
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com