summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorGustavo Zacarias <gustavo@zacarias.com.ar>2015-11-16 16:55:06 -0300
committerThomas Petazzoni <thomas.petazzoni@free-electrons.com>2015-11-16 21:14:59 +0100
commit8963207bf6837fb19ff811d87486cf10d790cc38 (patch)
tree74b6fffae29d279ee4667518b6aa80828f62806c
parent8a3478d9b6c19fbbfb9e2c1058b570c868062ebd (diff)
downloadbuildroot-8963207bf6837fb19ff811d87486cf10d790cc38.tar.gz
buildroot-8963207bf6837fb19ff811d87486cf10d790cc38.zip
strongswan: security bump to version 5.3.4
Fixes: CVE-2015-8023 - authentication bypass vulnerability in the eap-mschapv2 plugin that was caused by insufficient verification of the internal state when handling EAP-MSCHAPv2 Success messages received by the client. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
-rw-r--r--package/strongswan/strongswan.hash6
-rw-r--r--package/strongswan/strongswan.mk2
2 files changed, 4 insertions, 4 deletions
diff --git a/package/strongswan/strongswan.hash b/package/strongswan/strongswan.hash
index 5e1cf4d1d9..4d6fd07feb 100644
--- a/package/strongswan/strongswan.hash
+++ b/package/strongswan/strongswan.hash
@@ -1,4 +1,4 @@
-# From http://download.strongswan.org/strongswan-5.3.3.tar.bz2.md5
-md5 5a25f3d1c31a77ef44d14a2e7b3eaad0 strongswan-5.3.3.tar.bz2
+# From http://download.strongswan.org/strongswan-5.3.4.tar.bz2.md5
+md5 655a632a515c74a99f2e9cc337ab2f33 strongswan-5.3.4.tar.bz2
# Calculated based on the hash above
-sha256 39d2e8f572a57a77dda8dd8bdaf2ee47ad3cefeb86bbb840d594aa75f00f33e2 strongswan-5.3.3.tar.bz2
+sha256 938ad1f7b612e039f1d32333f4865160be70f9fb3c207a31127d0168116459aa strongswan-5.3.4.tar.bz2
diff --git a/package/strongswan/strongswan.mk b/package/strongswan/strongswan.mk
index ff4c0723f6..b4003d321f 100644
--- a/package/strongswan/strongswan.mk
+++ b/package/strongswan/strongswan.mk
@@ -4,7 +4,7 @@
#
################################################################################
-STRONGSWAN_VERSION = 5.3.3
+STRONGSWAN_VERSION = 5.3.4
STRONGSWAN_SOURCE = strongswan-$(STRONGSWAN_VERSION).tar.bz2
STRONGSWAN_SITE = http://download.strongswan.org
STRONGSWAN_LICENSE = GPLv2+
OpenPOWER on IntegriCloud