Michael Tremer 0c55ec5a49
strongswan: Update to 5.6.0 ...
Fixes CVE-2017-11185:
Fixed a DoS vulnerability in the gmp plugin that was caused by insufficient input validation
when verifying RSA signatures, which requires decryption with the operation m^e mod n,
where m is the signature, and e and n are the exponent and modulus of the public key.
The value m is an integer between 0 and n-1, however, the gmp plugin did not verify this.
So if m equals n the calculation results in 0, in which case mpz_export() returns NULL.
This result wasn't handled properly causing a null-pointer dereference.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2017-08-23 20:03:21 +01:00
2012-08-24 15:28:24 +02:00
2014-07-01 11:08:17 +02:00
2017-05-22 20:03:01 +01:00
2013-02-05 21:35:16 +01:00
2014-07-05 13:43:25 +02:00
2015-07-10 15:14:15 +02:00
2014-05-29 19:35:38 +02:00
2012-07-19 14:06:47 +02:00
2017-06-07 17:19:30 +01:00
2011-06-01 23:46:42 +02:00
2016-07-13 16:55:29 +01:00
2016-08-06 15:20:07 +01:00
2016-02-01 07:31:46 +01:00
2015-08-25 22:02:31 +01:00
2016-02-08 13:53:13 +01:00
2017-08-15 20:08:22 +02:00
2010-12-10 13:29:23 +01:00
2014-08-24 15:22:04 +02:00
2017-03-24 13:24:42 +01:00
2013-01-17 20:38:01 +01:00
2016-07-26 14:53:06 +01:00
2011-03-21 09:29:53 +01:00
2014-09-06 17:15:05 +02:00
2016-10-03 12:12:13 +01:00
2015-04-09 14:35:54 +02:00
2015-04-11 22:03:03 +02:00
2017-04-04 18:59:44 +01:00
2014-05-29 23:36:15 +02:00
2012-11-13 18:26:28 +01:00
2010-11-25 14:18:11 +01:00
2016-07-15 11:09:42 +01:00
2013-05-27 20:00:31 +02:00
2015-02-20 16:52:53 +01:00
2017-05-22 20:03:01 +01:00
2012-08-08 10:48:55 +02:00
2017-05-22 20:03:01 +01:00
2014-07-23 10:30:14 +02:00
2011-05-23 23:08:28 +02:00
2016-10-14 00:05:55 +01:00
2013-01-15 17:48:43 +01:00
2014-05-13 20:36:58 +02:00
2014-07-10 19:24:50 +02:00
2011-02-20 15:51:15 +01:00
2012-11-15 13:50:36 +01:00
2011-01-08 14:51:49 +01:00
2016-06-20 16:25:29 +01:00
2017-04-06 19:12:06 +01:00
2017-08-23 20:03:21 +01:00
2013-09-06 13:06:09 +02:00
2014-06-12 16:31:43 +02:00
2012-11-26 17:28:25 +01:00
2016-10-01 18:42:18 +01:00
2013-07-15 17:05:44 +02:00
2013-07-02 21:25:14 +02:00
2015-03-17 20:42:41 +01:00
2015-02-11 15:15:47 +01:00
2014-04-25 12:42:52 +02:00
2015-03-30 20:28:54 +02:00
2010-12-02 16:30:11 +01:00
2013-07-29 21:29:34 +02:00
2011-10-02 17:40:28 +02:00
2015-02-20 10:07:33 +01:00
2016-12-31 14:05:56 +00:00
2017-08-17 14:25:42 +02:00
2016-07-20 16:46:23 +01:00
2015-06-16 14:39:26 +02:00
2017-05-18 12:23:21 +01:00
2013-04-12 13:54:06 +02:00
2013-10-04 14:52:44 +02:00
2013-09-02 00:08:07 +02:00
2012-08-03 19:22:05 +02:00
2016-09-13 19:37:58 +02:00
2013-08-18 16:20:59 +02:00
2015-04-18 16:42:22 +02:00
0c55ec5a49