[ubuntu/trusty-security] strongswan 5.1.2-0ubuntu2.10 (Accepted)

[Marc Deslauriers]

strongswan (5.1.2-0ubuntu2.10) trusty-security; urgency=medium

  * SECURITY UPDATE: Insufficient input validation in gmp plugin
    - debian/patches/strongswan-5.0.1-5.3.0_gmp-pkcs1-verify.patch: don't
      parse PKCS1 v1.5 RSA signatures to verify them in
      src/libstrongswan/plugins/gmp/gmp_rsa_private_key.c,
      src/libstrongswan/plugins/gmp/gmp_rsa_public_key.c.
    - debian/patches/chunk_equals_const.patch: backport required function
      to src/libstrongswan/utils/chunk.h.
    - debian/patches/memeq_const.patch: backport required function to
      src/libstrongswan/utils/utils.*.
    - CVE-2018-16151
    - CVE-2018-16152
  * SECURITY UPDATE: remote denial of service
    - debian/patches/strongswan-5.0.1-5.4.0_skeyseed_init.patch: properly
      initialize variable in src/libcharon/sa/ikev2/keymat_v2.c.
    - CVE-2018-10811
  * SECURITY UPDATE: DoS in stroke plugin
    - debian/patches/strongswan-5.1.2-5.6.2_stroke_msg_len.patch: ensure a
      minimum message length in
      src/libcharon/plugins/stroke/stroke_socket.c.
    - CVE-2018-5388

strongswan (5.1.2-0ubuntu2.8) trusty; urgency=medium

  * d/control: Add Conflicts from strongswan-starter to openswan to
    avoid file conflict on upgrade. (LP: #1755693)

Date: 2018-09-18 13:25:13.838998+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/strongswan/5.1.2-0ubuntu2.10
-------------- next part --------------
Sorry, changesfile not available.