denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

NEWS: Add info about CVE-2015-3991

Browse Source
This commit is contained in:
Tobias Brunner
2015-06-01 09:42:11 +02:00
committed by Andreas Steffen
parent 541543dbfe
commit 099260d8fd
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
NEWS
+7
View File
@@ -1,6 +1,13 @@
strongswan-5.3.1
----------------
- Fixed a denial-of-service and potential remote code execution vulnerability
triggered by IKEv1/IKEv2 messages that contain payloads for the respective
other IKE version. Such payload are treated specially since 5.2.2 but because
they were still identified by their original payload type they were used as
such in some places causing invalid function pointer dereferences.
The vulnerability has been registered as CVE-2015-3991.
- The new aesni plugin provides CBC, CTR, XCBC, CMAC, CCM and GCM crypto
primitives for AES-128/192/256. The plugin requires AES-NI and PCLMULQDQ
instructions and works on both x86 and x64 architectures. It provides