A vulnerability in the openssl plugin related to the enumeration of certificates in PKCS#7 containers was discovered in strongSwan that can result in memory leaks. All versions since 5.0.2 are affected.
A vulnerability in the openssl plugin related to the enumeration of certificates in PKCS#7 containers was discovered in strongSwan that can result in memory leaks. All versions since 5.0.2 are affected.
A vulnerability in the eap-aka plugin related to processing an unexpected AKA-Synchronization-Failure message was discovered in strongSwan that can result in a crash. All versions since 4.1.10 are affected.
A vulnerability in the openssl plugin related to the processing of PKCS#7 containers was discovered in strongSwan that can result in a crash. All versions since 5.0.2 are affected.
We are happy to announce the release of strongSwan 6.1.0, which fixes eleven vulnerabilities, disables IKEv1 by default, adds support for SA migration on Linux, and comes with several other improvements and fixes.
A vulnerability in libstrongswan related to the cloning of certain identities was discovered in strongSwan that can result in a double-free and potentially remote code execution. All versions since 4.3.3 are affected.
We are happy to announce the release of strongSwan 6.0.7, which fixes a vulnerability and comes with several other improvements and fixes.
A vulnerability in the gmp plugin related to RSA decryption was discovered in strongSwan that can result in a crash. All versions since 4.3.2 are affected.
A vulnerability in libradius related to the processing of RADIUS attributes was discovered in strongSwan that can result in an infinite loop or an out-of-bounds read that may cause a crash. All versions since 4.2.14 are affected.