denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

NEWS: Add info about CVE-2021-45079

Browse Source
This commit is contained in:
Tobias Brunner
2022-01-20 17:25:07 +01:00
parent 64cc9acbf0
commit 4f560557b0
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
NEWS
+6
View File
@@ -1,6 +1,12 @@
strongswan-5.9.5 strongswan-5.9.5
---------------- ----------------
- Fixed a vulnerability in the EAP client implementation that was caused by
incorrectly handling early EAP-Success messages. It may allow to bypass the
client and in some scenarios even the server authentication, or could lead to
a denial-of-service attack.
This vulnerability has been registered as CVE-2021-45079.
- Using the trusted RSA or ECC Endorsement Key of the TPM 2.0, libtpmtss may now - Using the trusted RSA or ECC Endorsement Key of the TPM 2.0, libtpmtss may now
establish a secure session via RSA encryption or an ephemeral ECDH key establish a secure session via RSA encryption or an ephemeral ECDH key
exchange, respectively. The session allows HMAC-based authenticated exchange, respectively. The session allows HMAC-based authenticated