[ubuntu/focal-security] strongswan 5.8.2-1ubuntu3.4 (Accepted)

[Marc Deslauriers]

strongswan (5.8.2-1ubuntu3.4) focal-security; urgency=medium

  * SECURITY UPDATE: Incorrect Handling of Early EAP-Success Messages
    - debian/patches/CVE-2021-45079.patch: enforce failure if MSK
      generation fails in src/libcharon/plugins/eap_gtc/eap_gtc.c,
      src/libcharon/plugins/eap_md5/eap_md5.c,
      src/libcharon/plugins/eap_radius/eap_radius.c,
      src/libcharon/sa/eap/eap_method.h,
      src/libcharon/sa/ikev2/authenticators/eap_authenticator.c.
    - CVE-2021-45079

Date: 2022-01-11 13:13:26.244789+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/strongswan/5.8.2-1ubuntu3.4
-------------- next part --------------
Sorry, changesfile not available.