[ubuntu/bionic-security] strongswan 5.6.2-1ubuntu2.9 (Accepted)

Leonidas S. Barbosa leo.barbosa at canonical.com
Mon Oct 3 17:04:25 UTC 2022


strongswan (5.6.2-1ubuntu2.9) bionic-security; urgency=medium

  * SECURITY UPDATE: Using Untrusted URIs for Revocation Checking
    - debian/patches/CVE-2022-40617.patch: do online revocation checks only
      after basic trust chain validation in
      src/libstrongswan/credentials/credential_manager.c.
    - CVE-2022-40617

Date: 2022-09-21 11:48:15.599825+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: leo.barbosa at canonical.com (Leonidas S. Barbosa)
https://launchpad.net/ubuntu/+source/strongswan/5.6.2-1ubuntu2.9
-------------- next part --------------
Sorry, changesfile not available.


More information about the Bionic-changes mailing list