| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2021-11-24 | cert-cache: Prevent crash due to integer overflow/sign change1.3.81.3.71.3.61.3.51.3.41.3.3-epa11.3.31.3.2equuleus | Tobias Brunner | |
| random() allocates values in the range [0, RAND_MAX], with RAND_MAX usually equaling INT_MAX = 2^31-1. Previously, values between 0 and 31 were added directly to that offset before applying`% CACHE_SIZE` to get an index into the cache array. If the random value was very high, this resulted in an integer overflow and a negative index value and, therefore, an out-of-bounds access of the array and in turn dereferencing invalid pointers when trying to acquire the read lock. This most likely results in a segmentation fault. Fixes: 764e8b2211ce ("reimplemented certificate cache") Fixes: CVE-2021-41991 Signed-off-by: Daniil Baturin <daniil@vyos.io> | |||
| 2021-11-24 | Reject RSASSA-PSS params with negative salt length | Tobias Brunner | |
| The `salt_len` member in the struct is of type `ssize_t` because we use negative values for special automatic salt lengths when generating signatures. Not checking this could lead to an integer overflow. The value is assigned to the `len` field of a chunk (`size_t`), which is further used in calculations to check the padding structure and (if that is passed by a matching crafted signature value) eventually a memcpy() that will result in a segmentation fault. Fixes: a22316520b91 ("signature-params: Add functions to parse/build ASN.1 RSASSA-PSS params") Fixes: 7d6b81648b2d ("gmp: Add support for RSASSA-PSS signature verification") Fixes: CVE-2021-41990 Signed-off-by: Daniil Baturin <daniil@baturin.org> | |||
| 2019-01-02 | New upstream version 5.7.2 | Yves-Alexis Perez | |
| 2018-10-01 | New upstream version 5.7.1 | Yves-Alexis Perez | |
| 2018-09-24 | New upstream version 5.7.0 | Yves-Alexis Perez | |
| 2018-06-04 | New upstream version 5.6.3 | Yves-Alexis Perez | |
| 2018-02-19 | New upstream version 5.6.2 | Yves-Alexis Perez | |
| 2017-11-21 | New upstream version 5.6.1 | Yves-Alexis Perez | |
| 2017-09-01 | New upstream version 5.6.0 | Yves-Alexis Perez | |
| 2017-05-30 | New upstream version 5.5.3 | Yves-Alexis Perez | |
| 2017-04-01 | New upstream version 5.5.2 | Yves-Alexis Perez | |
| 2016-10-20 | New upstream version 5.5.1 | Yves-Alexis Perez | |
| 2016-07-16 | Imported Upstream version 5.5.0 | Yves-Alexis Perez | |
| 2016-03-24 | Imported Upstream version 5.4.0 | Yves-Alexis Perez | |
| 2015-11-26 | Imported Upstream version 5.3.5 | Yves-Alexis Perez | |
| 2015-11-18 | Imported Upstream version 5.3.4 | Yves-Alexis Perez | |
| 2015-10-22 | Imported Upstream version 5.3.3 | Yves-Alexis Perez | |
| 2015-06-08 | Imported Upstream version 5.3.2 | Yves-Alexis Perez | |
| 2015-06-01 | Imported Upstream version 5.3.1 | Yves-Alexis Perez | |
| 2015-04-11 | Imported Upstream version 5.3.0 | Yves-Alexis Perez | |
| 2014-10-21 | Import upstream release 5.2.1 | Romain Francoise | |
| 2014-07-11 | Imported Upstream version 5.2.0 | Yves-Alexis Perez | |
| 2014-04-15 | Import upstream version 5.1.3 | Romain Francoise | |
| 2014-03-11 | Imported Upstream version 5.1.2 | Yves-Alexis Perez | |
| 2013-11-01 | Imported Upstream version 5.1.1 | Yves-Alexis Perez | |
| 2013-08-25 | Imported Upstream version 5.1.0 | Yves-Alexis Perez | |
| 2013-04-30 | Imported Upstream version 5.0.4 | Yves-Alexis Perez | |
| 2013-04-26 | Imported Upstream version 5.0.3 | Yves-Alexis Perez | |
| 2013-02-07 | Imported Upstream version 5.0.2 | Yves-Alexis Perez | |
| 2013-01-02 | Imported Upstream version 5.0.1 | Yves-Alexis Perez | |
| 2012-06-28 | Imported Upstream version 4.6.4 | Yves-Alexis Perez | |
| 2011-05-19 | Imported Upstream version 4.5.2 | René Mayrhofer | |
| 2011-03-05 | Imported Upstream version 4.5.1 | René Mayrhofer | |
| 2010-11-28 | [svn-upgrade] new version strongswan (4.5.0) | Rene Mayrhofer | |
| 2010-08-09 | [svn-upgrade] new version strongswan (4.4.1) | Rene Mayrhofer | |
| 2010-05-25 | [svn-upgrade] Integrating new upstream version, strongswan (4.4.0) | Rene Mayrhofer | |
| 2010-02-23 | [svn-upgrade] Integrating new upstream version, strongswan (4.3.6) | Rene Mayrhofer | |
| 2009-10-21 | [svn-upgrade] Integrating new upstream version, strongswan (4.3.4) | Rene Mayrhofer | |
| 2009-06-23 | [svn-upgrade] Integrating new upstream version, strongswan (4.3.2) | Rene Mayrhofer | |
| 2009-04-01 | [svn-upgrade] Integrating new upstream version, strongswan (4.2.14) | Rene Mayrhofer | |
| 2009-03-22 | [svn-upgrade] Integrating new upstream version, strongswan (4.2.13) | Rene Mayrhofer | |
| 2009-02-28 | [svn-upgrade] Integrating new upstream version, strongswan (4.2.12) | Rene Mayrhofer | |
| 2008-12-05 | [svn-upgrade] Integrating new upstream version, strongswan (4.2.9) | Rene Mayrhofer | |
| 2008-10-29 | [svn-upgrade] Integrating new upstream version, strongswan (4.2.8) | Rene Mayrhofer | |
| 2008-07-09 | [svn-upgrade] Integrating new upstream version, strongswan (4.2.4) | Rene Mayrhofer | |
| 2008-03-30 | [svn-upgrade] Integrating new upstream version, strongswan (4.1.11) | Rene Mayrhofer | |
| 2008-02-07 | [svn-upgrade] Integrating new upstream version, strongswan (4.1.10) | Rene Mayrhofer | |
| 2007-10-26 | [svn-upgrade] Integrating new upstream version, strongswan (4.1.8) | Rene Mayrhofer | |
| 2007-07-04 | [svn-upgrade] Integrating new upstream version, strongswan (4.1.4) | Rene Mayrhofer | |
| 2007-06-03 | [svn-upgrade] Integrating new upstream version, strongswan (4.1.3) | Rene Mayrhofer | |
 |
index : vyos-strongswan.git | |
| (mirror of https://github.com/vyos/vyos-strongswan.git) |
| summaryrefslogtreecommitdiff |