From 5fff8c83fc7aa928b29e8cbcab1f3756f36b6607 Mon Sep 17 00:00:00 2001 From: Yves-Alexis Perez Date: Mon, 4 Jun 2018 10:02:05 +0200 Subject: update changelog for 5.6.3 --- debian/changelog | 15 +++++++++++++++ 1 file changed, 15 insertions(+) (limited to 'debian') diff --git a/debian/changelog b/debian/changelog index 6dc478748..a2a65712e 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,18 @@ +strongswan (5.6.3-1) UNRELEASED; urgency=medium + + * New upstream version 5.6.2 + * update charon-systemd AppArmor profile (closes: #896813) + * New upstream version 5.6.3 + - fix a DoS vulnerability in the IKEv2 key derivation if the openssl + plugin is used in FIPS mode and HMAC-MD5 is negotiated as PRF + (CVE-2018-10811) + - fix a vulnerability in the stroke plugin, which did not check the + received length before reading a message from the control socket + (CVE-2018-5388) + * d/p/05_charon-nm-Fix-building-list-of-DNS-MDNS-servers-with removed + + -- Yves-Alexis Perez Mon, 04 Jun 2018 10:11:29 +0200 + strongswan (5.6.2-2) unstable; urgency=medium * charon-nm: Fix building list of DNS/MDNS servers with libnm -- cgit v1.2.3