| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2021-11-24 | Reject RSASSA-PSS params with negative salt length | Tobias Brunner | |
| The `salt_len` member in the struct is of type `ssize_t` because we use negative values for special automatic salt lengths when generating signatures. Not checking this could lead to an integer overflow. The value is assigned to the `len` field of a chunk (`size_t`), which is further used in calculations to check the padding structure and (if that is passed by a matching crafted signature value) eventually a memcpy() that will result in a segmentation fault. Fixes: a22316520b91 ("signature-params: Add functions to parse/build ASN.1 RSASSA-PSS params") Fixes: 7d6b81648b2d ("gmp: Add support for RSASSA-PSS signature verification") Fixes: CVE-2021-41990 Signed-off-by: Daniil Baturin <daniil@baturin.org> | |||
| 2019-01-02 | New upstream version 5.7.2 | Yves-Alexis Perez | |
| 2018-09-24 | New upstream version 5.7.0 | Yves-Alexis Perez | |
| 2018-06-04 | New upstream version 5.6.3 | Yves-Alexis Perez | |
| 2018-02-19 | New upstream version 5.6.2 | Yves-Alexis Perez | |
| 2017-11-21 | New upstream version 5.6.1 | Yves-Alexis Perez | |
| 2017-05-30 | New upstream version 5.5.3 | Yves-Alexis Perez | |
| 2017-04-01 | New upstream version 5.5.2 | Yves-Alexis Perez | |
| 2016-10-20 | New upstream version 5.5.1 | Yves-Alexis Perez | |
| 2015-11-18 | Imported Upstream version 5.3.4 | Yves-Alexis Perez | |
| 2015-04-11 | Imported Upstream version 5.3.0 | Yves-Alexis Perez | |
| 2013-08-25 | Imported Upstream version 5.1.0 | Yves-Alexis Perez | |
| 2013-02-07 | Imported Upstream version 5.0.2 | Yves-Alexis Perez | |
| 2012-06-28 | Imported Upstream version 4.6.4 | Yves-Alexis Perez | |
| 2010-11-28 | [svn-upgrade] new version strongswan (4.5.0) | Rene Mayrhofer | |
| 2010-08-09 | [svn-upgrade] new version strongswan (4.4.1) | Rene Mayrhofer | |
| 2010-05-25 | [svn-upgrade] Integrating new upstream version, strongswan (4.4.0) | Rene Mayrhofer | |
| 2010-02-23 | [svn-upgrade] Integrating new upstream version, strongswan (4.3.6) | Rene Mayrhofer | |
| 2009-10-21 | [svn-upgrade] Integrating new upstream version, strongswan (4.3.4) | Rene Mayrhofer | |
| 2009-06-23 | [svn-upgrade] Integrating new upstream version, strongswan (4.3.2) | Rene Mayrhofer | |
| 2009-04-01 | [svn-upgrade] Integrating new upstream version, strongswan (4.2.14) | Rene Mayrhofer | |
| 2008-07-09 | [svn-upgrade] Integrating new upstream version, strongswan (4.2.4) | Rene Mayrhofer | |
 |
index : vyos-strongswan.git | |
| (mirror of https://github.com/vyos/vyos-strongswan.git) |
| summaryrefslogtreecommitdiff |