mirror of
https://github.com/strongswan/strongswan.git
synced 2025-10-04 00:00:14 -04:00
version bump to 4.2.15
This commit is contained in:
parent
e1ae5d94ae
commit
d7d3492716
13
NEWS
13
NEWS
@ -1,3 +1,16 @@
|
|||||||
|
strongswan-4.2.15
|
||||||
|
-----------------
|
||||||
|
|
||||||
|
- Fixed two DoS vulnerabilities in the charon daemon that were discovered by
|
||||||
|
fuzzing techniques: 1) Sending a malformed IKE_SA_INIT request leaved an
|
||||||
|
incomplete state which caused a null pointer dereference if a subsequent
|
||||||
|
CREATE_CHILD_SA request was sent. 2) Sending an IKE_AUTH request with either
|
||||||
|
a missing TSi or TSr payload caused a null pointer derefence because the
|
||||||
|
checks for TSi and TSr were interchanged. The IKEv2 fuzzer used was
|
||||||
|
developped by the Orange Labs vulnerability research team. The tool was
|
||||||
|
initially written by Gabriel Campana and is now maintained by Laurent Butti.
|
||||||
|
|
||||||
|
|
||||||
strongswan-4.2.14
|
strongswan-4.2.14
|
||||||
-----------------
|
-----------------
|
||||||
|
|
||||||
|
@ -16,7 +16,7 @@ dnl ===========================
|
|||||||
dnl initialize & set some vars
|
dnl initialize & set some vars
|
||||||
dnl ===========================
|
dnl ===========================
|
||||||
|
|
||||||
AC_INIT(strongSwan,4.2.14)
|
AC_INIT(strongSwan,4.2.15)
|
||||||
AM_INIT_AUTOMAKE(tar-ustar)
|
AM_INIT_AUTOMAKE(tar-ustar)
|
||||||
AC_C_BIGENDIAN
|
AC_C_BIGENDIAN
|
||||||
AC_SUBST(confdir, '${sysconfdir}')
|
AC_SUBST(confdir, '${sysconfdir}')
|
||||||
|
@ -206,7 +206,8 @@ static struct vid_struct _vid_tab[] = {
|
|||||||
/*
|
/*
|
||||||
* strongSwan
|
* strongSwan
|
||||||
*/
|
*/
|
||||||
DEC_MD5_VID(STRONGSWAN, "strongSwan 4.2.14")
|
DEC_MD5_VID(STRONGSWAN, "strongSwan 4.2.15")
|
||||||
|
DEC_MD5_VID(STRONGSWAN_4_2_14,"strongSwan 4.2.14")
|
||||||
DEC_MD5_VID(STRONGSWAN_4_2_13,"strongSwan 4.2.13")
|
DEC_MD5_VID(STRONGSWAN_4_2_13,"strongSwan 4.2.13")
|
||||||
DEC_MD5_VID(STRONGSWAN_4_2_12,"strongSwan 4.2.12")
|
DEC_MD5_VID(STRONGSWAN_4_2_12,"strongSwan 4.2.12")
|
||||||
DEC_MD5_VID(STRONGSWAN_4_2_11,"strongSwan 4.2.11")
|
DEC_MD5_VID(STRONGSWAN_4_2_11,"strongSwan 4.2.11")
|
||||||
|
@ -131,6 +131,7 @@ enum known_vendorid {
|
|||||||
VID_STRONGSWAN_4_2_11 =111,
|
VID_STRONGSWAN_4_2_11 =111,
|
||||||
VID_STRONGSWAN_4_2_12 =112,
|
VID_STRONGSWAN_4_2_12 =112,
|
||||||
VID_STRONGSWAN_4_2_13 =113,
|
VID_STRONGSWAN_4_2_13 =113,
|
||||||
|
VID_STRONGSWAN_4_2_14 =114,
|
||||||
|
|
||||||
/* 101 - 200 : NAT-Traversal */
|
/* 101 - 200 : NAT-Traversal */
|
||||||
VID_NATT_STENBERG_01 =151,
|
VID_NATT_STENBERG_01 =151,
|
||||||
|
@ -53,14 +53,14 @@ are required for the strongSwan testing environment:
|
|||||||
* A vanilla Linux kernel on which the UML kernel will be based on.
|
* A vanilla Linux kernel on which the UML kernel will be based on.
|
||||||
We recommend the use of
|
We recommend the use of
|
||||||
|
|
||||||
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.28.8.tar.bz2
|
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.29.4.tar.bz2
|
||||||
|
|
||||||
* The Linux kernel 2.6.28 does not require any patches for the uml guest kernel
|
* The Linux kernel 2.6.29.4 does not require any patches for the uml guest kernel
|
||||||
to successfully start up.
|
to successfully start up.
|
||||||
|
|
||||||
* The matching .config file required to compile the UML kernel:
|
* The matching .config file required to compile the UML kernel:
|
||||||
|
|
||||||
http://download.strongswan.org/uml/.config-2.6.28
|
http://download.strongswan.org/uml/.config-2.6.29
|
||||||
|
|
||||||
* A gentoo-based UML file system (compressed size 130 MBytes) found at
|
* A gentoo-based UML file system (compressed size 130 MBytes) found at
|
||||||
|
|
||||||
@ -68,7 +68,7 @@ are required for the strongSwan testing environment:
|
|||||||
|
|
||||||
* The latest strongSwan distribution
|
* The latest strongSwan distribution
|
||||||
|
|
||||||
http://download.strongswan.org/strongswan-4.2.14.tar.bz2
|
http://download.strongswan.org/strongswan-4.2.15.tar.bz2
|
||||||
|
|
||||||
|
|
||||||
3. Creating the environment
|
3. Creating the environment
|
||||||
|
@ -21,7 +21,7 @@ UMLTESTDIR=~/strongswan-testing
|
|||||||
|
|
||||||
# Bzipped kernel sources
|
# Bzipped kernel sources
|
||||||
# (file extension .tar.bz2 required)
|
# (file extension .tar.bz2 required)
|
||||||
KERNEL=$UMLTESTDIR/linux-2.6.29.tar.bz2
|
KERNEL=$UMLTESTDIR/linux-2.6.29.4.tar.bz2
|
||||||
|
|
||||||
# Extract kernel version
|
# Extract kernel version
|
||||||
KERNELVERSION=`basename $KERNEL .tar.bz2 | sed -e 's/linux-//'`
|
KERNELVERSION=`basename $KERNEL .tar.bz2 | sed -e 's/linux-//'`
|
||||||
@ -33,7 +33,7 @@ KERNELCONFIG=$UMLTESTDIR/.config-2.6.29
|
|||||||
#UMLPATCH=$UMLTESTDIR/uml-2.6.26.patch.bz2
|
#UMLPATCH=$UMLTESTDIR/uml-2.6.26.patch.bz2
|
||||||
|
|
||||||
# Bzipped source of strongSwan
|
# Bzipped source of strongSwan
|
||||||
STRONGSWAN=$UMLTESTDIR/strongswan-4.2.14.tar.bz2
|
STRONGSWAN=$UMLTESTDIR/strongswan-4.2.15.tar.bz2
|
||||||
|
|
||||||
# strongSwan compile options (use "yes" or "no")
|
# strongSwan compile options (use "yes" or "no")
|
||||||
USE_LIBCURL="yes"
|
USE_LIBCURL="yes"
|
||||||
|
Loading…
x
Reference in New Issue
Block a user