[USN-6772-1] strongSwan vulnerability
Marc Deslauriers
marc.deslauriers at canonical.com
Tue May 14 12:28:07 UTC 2024
==========================================================================
Ubuntu Security Notice USN-6772-1
May 14, 2024
strongswan vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 22.04 LTS
Summary:
Fraudulent security certificates could allow access controls to be
bypassed.
Software Description:
- strongswan: IPsec VPN solution
Details:
Jan Schermer discovered that strongSwan incorrectly validated client
certificates in certain configurations. A remote attacker could possibly
use this issue to bypass access controls.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 22.04 LTS
libstrongswan 5.9.5-2ubuntu2.3
strongswan 5.9.5-2ubuntu2.3
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-6772-1
CVE-2022-4967
Package Information:
https://launchpad.net/ubuntu/+source/strongswan/5.9.5-2ubuntu2.3
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/ubuntu-security-announce/attachments/20240514/7925b737/attachment.sig>
More information about the ubuntu-security-announce
mailing list