]> git.ipfire.org Git - people/pmueller/ipfire-2.x.git/commit
strongswan: Update to 5.6.2
authorMichael Tremer <michael.tremer@ipfire.org>
Mon, 19 Feb 2018 23:44:57 +0000 (23:44 +0000)
committerMichael Tremer <michael.tremer@ipfire.org>
Mon, 19 Feb 2018 23:46:17 +0000 (23:46 +0000)
commitea3b9a4f8837242222115601487259181f79df9d
tree4bd0ff376ae2fa3a179bc2bff3c13a5b3099920e
parenta261cb06c6cdd3ba14ad0163c8c9e714ae94fc5b
strongswan: Update to 5.6.2

Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS
signatures that was caused by insufficient input validation.
One of the configurable parameters in algorithm identifier
structures for RSASSA-PSS signatures is the mask generation
function (MGF). Only MGF1 is currently specified for this purpose.
However, this in turn takes itself a parameter that specifies
the underlying hash function. strongSwan's parser did not
correctly handle the case of this parameter being absent,
causing an undefined data read.

This vulnerability has been registered as CVE-2018-6459.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
config/rootfiles/core/119/filelists/strongswan [new symlink]
config/rootfiles/core/119/update.sh
lfs/strongswan