SUSE-SU-2022:14887-1 Security update for strongswan

This update for strongswan fixes the following issues: - CVE-2018-16151: Fixed flaws in gmp plugin that could lead to authorization bypass. bsc1107874 - CVE-2018-16152: Fixed flaws in gmp plugin that could lead to authorization bypass. bsc1107874 - CVE-2018-17540: Fixed insufficient input...

SUSE-SU-2022:0492-1 Security update for strongswan

This update for strongswan fixes the following issues: - CVE-2021-45079: Fixed authentication bypass in EAP authentication. bsc1194471...

OPENSUSE-SU-2022:0492-1 Security update for strongswan

This update for strongswan fixes the following issues: - CVE-2021-45079: Fixed authentication bypass in EAP authentication. bsc1194471...

Security update for strongswan (important)

openSUSE Security Update: Security update for strongswan Announcement ID: openSUSE-SU-2022:0492-1 Rating: important References: 1194471 Cross-References: CVE-2021-45079 CVSS scores: CVE-2021-45079 NVD : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVE-2021-45079 SUSE: 6.5...

Critical Photon OS Security Update - PHSA-2022-3.0-0361

Updates of 'mariadb', 'linux-aws', 'linux', 'strongswan', 'linux-secure', 'linux-esx', 'linux-rt', 'apache-tomcat', 'go' packages of Photon OS have been released...

OESA-2022-1525 strongswan security update

The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel. Security Fixes: In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually...

Critical Photon OS Security Update - PHSA-2022-0439

Updates of 'mariadb', 'strongswan' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2022-4.0-0152

Updates of 'linux-esx', 'strongswan', 'linux-aws', 'linux', 'linux-secure', 'linux-rt' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2022-0361

Updates of 'linux-aws', 'linux-secure', 'linux', 'apache-tomcat', 'linux-rt', 'linux-esx', 'go', 'strongswan', 'mariadb' packages of Photon OS have been released...

In strongSwan before 5.9.5 a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2) even without server authentication.

...

[SECURITY] Fedora 35 Update: strongswan-5.9.5-2.fc35

The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel...

[SECURITY] Fedora 34 Update: strongswan-5.9.5-2.fc34

The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel...

Debian DLA-2909-1 : strongswan - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2909 advisory. Zhuowei Zhang discovered a bug in the EAP authentication client code of strongSwan, an IKE/IPsec suite, that may allow to bypass the client and in some scenarios even the...

Debian: Security Advisory (DLA-2909-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for strongswan (FEDORA-2022-b670788a8d)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for strongswan (FEDORA-2022-0e87c7994f)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] [DLA 2909-1] strongswan security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2909-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta February 03, 2022 https://wiki.debian.org/LTS -...

DLA-2909-1 strongswan - security update

Bulletin has no description...

strongSwan 4.1.2 < 5.9.5 Early EAP-Success Messages Vulnerability

strongSwan is prone to an incorrect handling of early EAP-Success messages vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later Th...

CVE-2021-45079

In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2 even without server authentication...