[Pkg-swan-devel] [strongswan] branch jessie-security updated (1efcf16 -> 2632c44)

Yves-Alexis Perez corsac at moszumanska.debian.org
Tue May 30 12:17:21 UTC 2017


This is an automated email from the git hooks/post-receive script.

corsac pushed a change to branch jessie-security
in repository strongswan.

      from  1efcf16   upload to jessie-security
       new  07e1e9a   Fix CVE-2017-9022 and CVE-2017-9023
       new  ddc47fe   disable vectors test
       new  c7da6ea   release strongSwan 5.2.1-6+deb8u3
       new  b6cd032   Fix openssl HMAC init and re-enable vectors test
       new  2632c44   release strongSwan 5.2.1-6+deb8u4

The 5 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


Summary of changes:
 debian/changelog                                   |  26 ++
 ...-t-pre-initialize-OpenSSL-HMAC-with-an-em.patch |  74 +++++
 ..._insufficient_input_validation_gmp_plugin.patch |  37 +++
 ...t_handling_of_choice_types_in_asn1_parser.patch | 366 +++++++++++++++++++++
 debian/patches/series                              |   3 +
 5 files changed, 506 insertions(+)
 create mode 100644 debian/patches/0001-openssl-Don-t-pre-initialize-OpenSSL-HMAC-with-an-em.patch
 create mode 100644 debian/patches/CVE-2017-9022_insufficient_input_validation_gmp_plugin.patch
 create mode 100644 debian/patches/CVE-2017-9023_incorrect_handling_of_choice_types_in_asn1_parser.patch

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-swan/strongswan.git



More information about the Pkg-swan-devel mailing list