]> git.ipfire.org Git - thirdparty/strongswan.git/shortlog
thirdparty/strongswan.git
5 days ago  Tobias Brunnerfile-logger: Prevent potential race when opening log... master
6 days ago  Tobias Brunnertpm-tss-trousers: Add missing log argument if AIK priva...
6 days ago  Tobias BrunnerRevert "Recognize critical IssuingDistributionPoint...
6 days ago  Tobias Brunnerauth-cfg: Avoid overflow when checking key strength...
6 days ago  Tobias Brunnersignature-params: Only modify passed params if parsing...
6 days ago  Tobias Brunnerchunk: Improve constant time comparison for chunks...
6 days ago  Tobias Brunnerencrypted-payload: Do basic decryption check only once
6 days ago  Tobias Brunnerpem: Avoid integer underflow when verifying padding...
6 days ago  Tobias Brunnereap-ttls: Fix memory leaks in error cases related to...
6 days ago  Tobias Brunnerprintf-hook-builtin: Avoid leaking stack contents when...
6 days ago  Tobias Brunnerml: Properly implement ByteDecode with d=12
6 days ago  Tobias Brunnerstroke: Avoid sharing a certificate printer between...
6 days ago  Tobias Brunnerwindows: Fix potential use-after-free when joining...
6 days ago  Tobias Brunneriv-manager: Don't allow zero max_ikev1_exchanges
6 days ago  Tobias Brunnerfips-prf: Increase log level when logging secret state
6 days ago  Tobias Brunnersha3: Fix applying second padding bit on big-endian...
6 days ago  Tobias Brunnerchild-sa-manager: Correctly remove replaced entry in...
6 days ago  Tobias Brunnerikev2: Make sure to correctly compare nonces of unequal...
6 days ago  Tobias Brunnerchunk: Add utility that compares the prefix of two...
6 days ago  Tobias Brunnergcrypt: Fix zeroing padding when extracting RSA value...
6 days ago  Tobias Brunnereap-sim-pcsc: Properly release context if determining...
6 days ago  Tobias Brunnereap-md5: Avoid memory leak caused by repeated challenges
6 days ago  Tobias Brunnerkernel-netlink: Properly clean up pending entry if...
6 days ago  Tobias Brunnerha: Fix offset checks in HA address pool
6 days ago  Tobias Brunnermem-pool: Enforce size limit also for range-based pools...
6 days ago  Tobias Brunnerxauth-pam: Use proper method to read session option
6 days ago  Tobias Brunnernm: Fix double-free of IKE config in error cases and...
6 days ago  Tobias Brunneropenssl: Fix memory leak when verifying plain RSA signa...
6 days ago  Tobias Brunnerpt-tls-client: Don't store PT-TLS message on stack
6 days ago  Tobias Brunnerpt-tls-server: Don't store PT-TLS message on stack
6 days ago  Tobias Brunnervici: Fix leak if selectors for redirect command are...
6 days ago  Tobias Brunnershunt-manager: Fix potential race between install and...
6 days ago  Tobias Brunnerpem: Properly handle encrypted PEM files without DEK...
6 days ago  Tobias Brunnerandroid: Fix reading split-tunneling block settings...
6 days ago  Tobias Brunnervici: Fix memory leaks if loading CA cert in authority...
6 days ago  Tobias Brunnerha: Fix memory leak if Child SA key derivation fails
6 days ago  Tobias Brunnerconnmark: Only install one rule per Child SA in PREROUTING
6 days ago  Tobias Brunnercharon-tkm: Fix potential use-after-free in chunk map
6 days ago  Tobias Brunnersha3: Make sure state and rate input buffers are 8...
6 days ago  Tobias Brunnerike-auth: Enforce PPK required constraint on the initiator
6 days ago  Tobias Brunnerike-init: Make sure we received a KE payload as initiator
6 days ago  Tobias BrunnerMake sure KEM implementations don't return an empty...
6 days ago  Tobias Brunnerandroid: Fix leak of JNI local ref in IMC when creating...
6 days ago  Tobias Brunnerxauth-generic: Make sure to only use secrets that match...
6 days ago  Tobias Brunnerkernel-wfp: Add support for SA deletion in either order
6 days ago  Tobias Brunnerhost: Do some proper validation when parsing CIDR-style...
6 days ago  Tobias Brunnereap-radius: Limit number of concurrently cached DAE...
6 days ago  Tobias Brunnersimaka-message: Prevent buffer overflow when generating...
6 days ago  Tobias Brunnerpkcs11: Avoid race condition in token hot-plug handling
6 days ago  Tobias Brunnerhasher: Avoid theoretical memory leaks for hashers...
6 days ago  Tobias Brunnerpkcs11: Fix memory leak in the hasher_t implementation
6 days ago  Tobias Brunnertls-eap: Only process ACKs on the server after processi...
6 days ago  Tobias Brunnertls-eap: Reject EAP Start packets from clients
6 days ago  Tobias Brunnertnccs-dynamic: Add missing checks for underlying TNCCS...
6 days ago  Tobias Brunnerwatcher: Properly handle conflict during concurrent...
6 days ago  Tobias Brunnerwolfssl: Use Absorb/SqueezeBlocks API for SHAKE-128...
6 days ago  Tobias BrunnerRevert "nm: Pass back the username auth-dialog runs...
6 days ago  Tobias Brunnercapabilities: Log warning if UID changes and no capabil...
6 days ago  Tobias Brunnersocket-win: Bind the sockets exclusively
6 days ago  Tobias Brunnereap-radius: Fix access to IKE_SA when sending interim...
6 days ago  Tobias Brunnerarray: Avoid issue when re-inserting existing element...
6 days ago  Tobias Brunnerkernel-pfroute: Remove IP addresses from hashtable...
6 days ago  Tobias Brunnerconstraints: Simplify policy constraint handling and...
6 days ago  Tobias Brunnerpts: Fix potential crash when resolving symlinks
6 days ago  Tobias Brunnerimv-attestation: Fix log message when failing to store...
6 days ago  Tobias Brunnerpts-database: Update reference file measurements as...
6 days ago  Tobias Brunnerpts-database: Reject reference file measurements with...
6 days ago  Tobias Brunneraesni: Make sure the CPU supports SSSE3
6 days ago  Tobias Brunnerldap: Replace deprecated function calls and support...
6 days ago  Tobias Brunnerunbound: Make sure RRs match the queried or canonical...
6 days ago  Tobias Brunnersec-updater: Use process_t to avoid potential command...
6 days ago  Tobias Brunnerkey-exchange: Rename function that verifies pubkey...
6 days ago  Tobias Brunnerbotan: Remove confusing documentation for DH helper...
6 days ago  Tobias Brunnermysql: Be more explicit when parsing database URI but...
6 days ago  Tobias Brunnerpgp: Log parsed packet data on level 4 as it may contai...
6 days ago  Tobias Brunnerkeymat_v2: Explicitly clear key derived during EAP...
6 days ago  Tobias Brunnervici: Also wipe cached PINs during clear-creds command
6 days ago  Tobias Brunnercurve25519: Explicitly wipe shared secret when destroyi...
6 days ago  Tobias Brunnereap-aka-3gpp: Fix length when logging AUTS and increase...
6 days ago  Tobias Brunnereap-aka-3gpp2: Log potentially sensitive material on...
6 days ago  Tobias Brunnereap-ttls: Add an upper bound for the length of the...
6 days ago  Tobias Brunnerike-sa-manager: Fix some inaccuracies in the header...
6 days ago  Tobias Brunnermediation-manager: Avoid potential use-after-free when...
6 days ago  Tobias Brunnerconnmark: Fix undefined shift if traffic selector is /0
6 days ago  Tobias Brunnerforecast: Fix undefined shift if traffic selector is /0
6 days ago  Tobias Brunnerikev1: Fix arguments when logging a UNITY_LOAD_BALANCE...
6 days ago  Tobias Brunnerchild-create: Fix crash when responder doesn't send...
6 days ago  Tobias Brunnerchild-rekey: Only reset state of SAs not actively rekey...
6 days ago  Tobias Brunnersqlite: Fix transaction handling for multiple concurren...
6 days ago  Tobias Brunneratomics: Use ACQUIRE ordering for ref_cur()
6 days ago  Tobias Brunnerkernel-wfp: Uninstall policies before deleting provider
6 days ago  Tobias Brunnertls-crypto: Reject signature schemes not actually defin...
6 days ago  Tobias Brunnerpts-file-meas: Fix mismatch between hash buffer size...
6 days ago  Tobias Brunnerme: Avoid crash when processing endpoint with invalid...
6 days ago  Tobias Brunnerconnect-manager: Ignore connectivity checks for incompl...
6 days ago  Tobias Brunnersystime-fix: Unregister validator also if time got...
6 days ago  Tobias Brunnerxauth-pam: Properly initialize response array when...
6 days ago  Tobias Brunnerkernel-netlink: Add some safety checks when printing...
6 days ago  Tobias Brunnerstream-service: Avoid race condition when accepting...
6 days ago  Tobias Brunnerip-packet: Properly skip IPv6 fragment headers
next