strongswan: security bump to version 5.3.4

Fixes:
CVE-2015-8023 - authentication bypass vulnerability in the eap-mschapv2
plugin that was caused by insufficient verification of the internal
state when handling EAP-MSCHAPv2 Success messages received by the
client.

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
This commit is contained in:
Gustavo Zacarias 2015-11-16 16:55:06 -03:00 committed by Thomas Petazzoni
parent 8a3478d9b6
commit 8963207bf6
2 changed files with 4 additions and 4 deletions

View File

@ -1,4 +1,4 @@
# From http://download.strongswan.org/strongswan-5.3.3.tar.bz2.md5
md5 5a25f3d1c31a77ef44d14a2e7b3eaad0 strongswan-5.3.3.tar.bz2
# From http://download.strongswan.org/strongswan-5.3.4.tar.bz2.md5
md5 655a632a515c74a99f2e9cc337ab2f33 strongswan-5.3.4.tar.bz2
# Calculated based on the hash above
sha256 39d2e8f572a57a77dda8dd8bdaf2ee47ad3cefeb86bbb840d594aa75f00f33e2 strongswan-5.3.3.tar.bz2
sha256 938ad1f7b612e039f1d32333f4865160be70f9fb3c207a31127d0168116459aa strongswan-5.3.4.tar.bz2

View File

@ -4,7 +4,7 @@
#
################################################################################
STRONGSWAN_VERSION = 5.3.3
STRONGSWAN_VERSION = 5.3.4
STRONGSWAN_SOURCE = strongswan-$(STRONGSWAN_VERSION).tar.bz2
STRONGSWAN_SITE = http://download.strongswan.org
STRONGSWAN_LICENSE = GPLv2+