diff options
author | Yves-Alexis Perez <corsac@debian.org> | 2015-06-04 12:18:55 +0200 |
---|---|---|
committer | Yves-Alexis Perez <corsac@debian.org> | 2015-06-04 12:18:55 +0200 |
commit | c82f488c9dbaea0d1c1e7d7a7dc2b69975280e9e (patch) | |
tree | 034bd7f17504688d82f30f7200431ca5e370094a /debian/changelog | |
parent | f226c093edf4b1a6099023529aec7a3a2b140ffc (diff) | |
download | vyos-strongswan-c82f488c9dbaea0d1c1e7d7a7dc2b69975280e9e.tar.gz vyos-strongswan-c82f488c9dbaea0d1c1e7d7a7dc2b69975280e9e.zip |
CVE-2015-4171_enforce_remote_auth added, fix potential leak of authentication credential to rogue server when using PSK or EAP. This is CVE-2015-4171.
Diffstat (limited to 'debian/changelog')
-rw-r--r-- | debian/changelog | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/debian/changelog b/debian/changelog index 38395b62b..a218f1da9 100644 --- a/debian/changelog +++ b/debian/changelog @@ -5,6 +5,9 @@ strongswan (5.3.1-1) UNRELEASED; urgency=medium - strongswan-5.2.2-5.3.0_unknown_payload dropped, included upstream. - 05_ivgen-allow-reusing-same-message-id-twice added, allow reusing the same message ID twice in sequential IV gen. strongSwan issue #980. + - CVE-2015-4171_enforce_remote_auth added, fix potential leak of + authentication credential to rogue server when using PSK or EAP. This is + CVE-2015-4171. -- Yves-Alexis Perez <corsac@debian.org> Mon, 01 Jun 2015 15:00:41 +0200 |