diff options
| author | Wang Mingyu <wangmy@fujitsu.com> | 2026-04-30 18:49:17 +0800 |
|---|---|---|
| committer | Khem Raj <khem.raj@oss.qualcomm.com> | 2026-05-12 01:06:57 -0700 |
| commit | b05b177ae5473395ab2fe6f341c0efd129dcfb68 (patch) | |
| tree | b37f2b9f407691419e3f48eb7806852eda480999 /meta-python/recipes-devtools/python/python3-packageurl-python_0.17.6.bb | |
| parent | db7155a0c2bc2475b27b88117057837654ddc0c1 (diff) | |
| download | meta-openembedded-b05b177ae5473395ab2fe6f341c0efd129dcfb68.tar.gz | |
strongswan: upgrade 6.0.5 -> 6.0.6
Changelog:
===========
- CVE-2026-35328 - Fixed a vulnerability in libtls related to the processing of
the supported_versions extension in TLS that can result in an infinite loop.
- CVE-2026-35329 - Fixed a vulnerability in libstrongswan and the pkcs7 plugin
related to the processing of encrypted PKCS#7 containers that can result in
a crash.
- CVE-2026-35330 - Fixed a vulnerability in in libsimaka related to the
processing of certain EAP-SIM/AKA attributes that can result in an infinite
loop or a heap-based buffer overflow and potentially remote code execution.
- CVE-2026-35331 - Fixed a vulnerability in the constraints plugin related to
the processing of X.509 name constraints that can allow authentication with
certificates that violate the constraints.
- CVE-2026-35332 - Fixed a vulnerability in libtls related to the processing of
ECDH public values in TLS < 1.3 that can result in a crash.
- CVE-2026-35333 - Fixed a vulnerability in libradius related to the processing
of RADIUS attributes that can result in an infinite loop or an out-of-bounds
read that may cause a crash.
- CVE-2026-35334 - Fixed a vulnerability in the gmp plugin related to RSA
decryption that can result in a crash.
- Made the Botan RNG types used/provided by the botan plugin configurable.
- The fix for the vulnerability in the constraints plugin now causes all
certificates that contain excluded name constraints of type directoryName (DN)
to get rejected.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Diffstat (limited to 'meta-python/recipes-devtools/python/python3-packageurl-python_0.17.6.bb')
0 files changed, 0 insertions, 0 deletions
