denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

added info about two DoS fixes

Browse Source
This commit is contained in:
Andreas Steffen
2009-06-18 19:29:16 +02:00
parent 1ea31180a0
commit 126f2130fb
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
NEWS
+5
View File
@@ -12,6 +12,11 @@ strongswan-4.3.2
Thanks to the openssl plugin, the ECP Diffie-Hellman groups 19, 20, 21, 25, and Thanks to the openssl plugin, the ECP Diffie-Hellman groups 19, 20, 21, 25, and
26 as well as ECDSA-256, ECDSA-384, and ECDSA-521 authentication can be used 26 as well as ECDSA-256, ECDSA-384, and ECDSA-521 authentication can be used
with IKEv1. with IKEv1.
- Applying their fuzzing tool, the Orange Labs vulnerability research team found
another two DoS vulnerabilities, one in the rather old ASN.1 parser of Relative
Distinguished Names (RDNs) and a second one in the conversion of ASN.1 UTCTIME
and GENERALIZEDTIME strings to a time_t value.
strongswan-4.3.1 strongswan-4.3.1