denozord/strongswan-ext
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

NEWS: Add info about CVE-2023-26463

Browse Source
This commit is contained in:
Tobias Brunner committed 2023-03-02 09:39:52 +01:00
1 parent 8aa13a1797
commit ed839b3067
1 file changed
+6
Download Patch File Download Diff File Expand all files Collapse all files
NEWS
+6
View File
@@ -1,6 +1,12 @@
strongswan-5.9.10 strongswan-5.9.10
----------------- -----------------
- Fixed a vulnerability related to certificate verification in TLS-based EAP
methods that leads to an authentication bypass followed by an expired pointer
dereference that results in a denial of service and possibly even remote code
execution.
This vulnerability has been registered as CVE-2023-26463.
- Added support for full packet hardware offload for IPsec SAs and policies with - Added support for full packet hardware offload for IPsec SAs and policies with
Linux 6.2 kernels to the kernel-netlink plugin. Linux 6.2 kernels to the kernel-netlink plugin.