| Message ID | 1447703706-28787-1-git-send-email-gustavo@zacarias.com.ar |
|---|---|
| State | Accepted |
| Headers | show |
Dear Gustavo Zacarias, On Mon, 16 Nov 2015 16:55:06 -0300, Gustavo Zacarias wrote: > Fixes: > CVE-2015-8023 - authentication bypass vulnerability in the eap-mschapv2 > plugin that was caused by insufficient verification of the internal > state when handling EAP-MSCHAPv2 Success messages received by the > client. > > Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> > --- > package/strongswan/strongswan.hash | 6 +++--- > package/strongswan/strongswan.mk | 2 +- > 2 files changed, 4 insertions(+), 4 deletions(-) Applied to master, thanks. Thomas
diff --git a/package/strongswan/strongswan.hash b/package/strongswan/strongswan.hash index 5e1cf4d..4d6fd07 100644 --- a/package/strongswan/strongswan.hash +++ b/package/strongswan/strongswan.hash @@ -1,4 +1,4 @@ -# From http://download.strongswan.org/strongswan-5.3.3.tar.bz2.md5 -md5 5a25f3d1c31a77ef44d14a2e7b3eaad0 strongswan-5.3.3.tar.bz2 +# From http://download.strongswan.org/strongswan-5.3.4.tar.bz2.md5 +md5 655a632a515c74a99f2e9cc337ab2f33 strongswan-5.3.4.tar.bz2 # Calculated based on the hash above -sha256 39d2e8f572a57a77dda8dd8bdaf2ee47ad3cefeb86bbb840d594aa75f00f33e2 strongswan-5.3.3.tar.bz2 +sha256 938ad1f7b612e039f1d32333f4865160be70f9fb3c207a31127d0168116459aa strongswan-5.3.4.tar.bz2 diff --git a/package/strongswan/strongswan.mk b/package/strongswan/strongswan.mk index ff4c072..b4003d3 100644 --- a/package/strongswan/strongswan.mk +++ b/package/strongswan/strongswan.mk @@ -4,7 +4,7 @@ # ################################################################################ -STRONGSWAN_VERSION = 5.3.3 +STRONGSWAN_VERSION = 5.3.4 STRONGSWAN_SOURCE = strongswan-$(STRONGSWAN_VERSION).tar.bz2 STRONGSWAN_SITE = http://download.strongswan.org STRONGSWAN_LICENSE = GPLv2+
Fixes: CVE-2015-8023 - authentication bypass vulnerability in the eap-mschapv2 plugin that was caused by insufficient verification of the internal state when handling EAP-MSCHAPv2 Success messages received by the client. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> --- package/strongswan/strongswan.hash | 6 +++--- package/strongswan/strongswan.mk | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-)