tocsin

Alpine/strongswan: high 7.5

The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certif

Action: Upgrade strongswan to 5.8.4-r3 or later.

Affected

introducedfixedlast affected
5.6.15.8.4-r3-

Fixed versions

5.8.4-r3

Sources

published · modified · JSON