denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

NEWS: Add some news for 6.0.0

Browse Source
This commit is contained in:
Tobias Brunner
2024-11-22 14:19:54 +01:00
parent a5e80cf5e4
commit b2210f446e
1 changed files with 13 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
NEWS
+13 -2
View File
@@ -1,3 +1,14 @@
strongswan-6.0.0
----------------
- Support of multiple post-quantum (and classic) key exchanges using the
IKE_INTERMEDIATE exchange (RFC 9242) and the Additional Key Exchange
transform types 1..7 (RFC 9370).
- ML-KEM is provided by the botan, wolfssl, openssl (only via AWS-LC) and the
new ml plugins.
strongswan-5.9.14 strongswan-5.9.14
----------------- -----------------
@@ -362,7 +373,7 @@ strongswan-5.9.4
salt lengths. salt lengths.
This vulnerability has been registered as CVE-2021-41990. This vulnerability has been registered as CVE-2021-41990.
- Fixed a denial-of-service vulnerability in the in-memory certificate cache - Fixed a denial-of-service vulnerabililty in the in-memory certificate cache
if certificates are replaced and a very large random value caused an integer if certificates are replaced and a very large random value caused an integer
overflow. overflow.
This vulnerability has been registered as CVE-2021-41991. This vulnerability has been registered as CVE-2021-41991.
@@ -1774,7 +1785,7 @@ strongswan-5.0.3
PT-TLS (RFC 6876), a Posture Transport Protocol over TLS. PT-TLS (RFC 6876), a Posture Transport Protocol over TLS.
- The charon systime-fix plugin can disable certificate lifetime checks on - The charon systime-fix plugin can disable certificate lifetime checks on
embedded systems if the system time is obviously out of sync after boot-up. embedded systems if the system time is obviously out of sync after bootup.
Certificates lifetimes get checked once the system time gets sane, closing Certificates lifetimes get checked once the system time gets sane, closing
or reauthenticating connections using expired certificates. or reauthenticating connections using expired certificates.