NEWS: Add info about CVE-2023-41913

2023-11-17 17:24:35 +01:00
parent 96d7937189
commit 46aa264430
1 changed files with 4 additions and 0 deletions
@@ -1,6 +1,10 @@
 strongswan-5.9.12
 -----------------

+- Fixed a vulnerability in charon-tkm related to processing DH public values
+  that can lead to a buffer overflow and potentially remote code execution.
+  This vulnerability has been registered as CVE-2023-41913.
+
 - The new `pki --ocsp` command produces OCSP responses based on certificate
  status information provided by plugins.