Ubuntu
strongswan package

  1. Bug #1806401
  2. Comment #2

Comment 2 for bug 1806401

Revision history for this message
Christian Ehrhardt  (paelzer) wrote :

In Debian, no these can be dropped:
- d/usr.lib.ipsec.charon, d/usr/sbin/charon-systemd: Add support for usr-merge, thanks to Christian Ehrhardt. LP: #1784023
* SECURITY UPDATE: Insufficient input validation in gmp plugin - debian/patches/strongswan-5.6.1-5.6.3_gmp-pkcs1-verify.patch
  CVE-2018-16151
  CVE-2018-16152
* SECURITY UPDATE: Insufficient input validation in gmp plugin - debian/patches/strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch
CVE-2018-17540

Part of our mass enabling is also in Debian as chapoly is enabled there now.
But not yet the bulk of it (https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848890) so the merge stays big for now.