summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorYves-Alexis Perez <corsac@debian.org>2018-06-04 10:02:05 +0200
committerYves-Alexis Perez <corsac@debian.org>2018-06-04 10:11:55 +0200
commit5fff8c83fc7aa928b29e8cbcab1f3756f36b6607 (patch)
treefb18532a8cca442ecd487b4f1cd5ff4f68bc0070
parentba32e7fa5d314427b0f966e9259e1397ecfd600e (diff)
downloadvyos-strongswan-5fff8c83fc7aa928b29e8cbcab1f3756f36b6607.tar.gz
vyos-strongswan-5fff8c83fc7aa928b29e8cbcab1f3756f36b6607.zip
update changelog for 5.6.3
-rw-r--r--debian/changelog15
1 files changed, 15 insertions, 0 deletions
diff --git a/debian/changelog b/debian/changelog
index 6dc478748..a2a65712e 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,18 @@
+strongswan (5.6.3-1) UNRELEASED; urgency=medium
+
+ * New upstream version 5.6.2
+ * update charon-systemd AppArmor profile (closes: #896813)
+ * New upstream version 5.6.3
+ - fix a DoS vulnerability in the IKEv2 key derivation if the openssl
+ plugin is used in FIPS mode and HMAC-MD5 is negotiated as PRF
+ (CVE-2018-10811)
+ - fix a vulnerability in the stroke plugin, which did not check the
+ received length before reading a message from the control socket
+ (CVE-2018-5388)
+ * d/p/05_charon-nm-Fix-building-list-of-DNS-MDNS-servers-with removed
+
+ -- Yves-Alexis Perez <corsac@debian.org> Mon, 04 Jun 2018 10:11:29 +0200
+
strongswan (5.6.2-2) unstable; urgency=medium
* charon-nm: Fix building list of DNS/MDNS servers with libnm