Summary: | <net-vpn/libreswan-3.32: Denial of service via malformed IKEv1 packet (CVE-2020-1763) | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Sam James <sam> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | minor | CC: | graaff |
Priority: | Normal | Flags: | nattka:
sanity-check+
|
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | https://libreswan.org/security/CVE-2020-1763/CVE-2020-1763.txt | ||
Whiteboard: | B3 [glsa+ cve] | ||
Package list: |
net-vpn/libreswan-3.32
|
Runtime testing required: | --- |
Description
Sam James
![]() ![]() ![]() ![]() @maintainer(s), please apply the provided patch or bump to 3.32. Patch: https://libreswan.org/security/CVE-2020-1763/libreswan-3.31-CVE-2020-1763.patch libreswan 3.32 is now available. I'll wait a day or so for testing before adding arches. (In reply to Hans de Graaff from comment #2) > libreswan 3.32 is now available. I'll wait a day or so for testing before > adding arches. No problem, thanks! (In reply to Hans de Graaff from comment #2) > libreswan 3.32 is now available. I'll wait a day or so for testing before > adding arches. How're we looking? amd64 stable x86 stable. Maintainer(s), please cleanup. Security, please vote. Cleanup done. (In reply to Hans de Graaff from comment #7) > Cleanup done. Thank you! GLSA vote: yes This issue was resolved and addressed in GLSA 202007-21 at https://security.gentoo.org/glsa/202007-21 by GLSA coordinator Sam James (sam_c). |