* Wed Oct 20 2021 Paul Wouters <paul.wouters@aiven.io> - 5.9.4-1

- Resolves: rhbz#2015165 strongswan-5.9.4 is available
- Resolves: rhbz#2015611 CVE-2021-41990 strongswan: gmp plugin: integer overflow via a crafted certificate with an RSASSA-PSS signature
- Resolves: rhbz#2015614 CVE-2021-41991 strongswan: integer overflow when replacing certificates in cache
- Add BuildRequire for tpm2-tss-devel and weak dependency for tpm2-tools
This commit is contained in:
Paul Wouters
2021-10-20 17:47:06 -04:00
parent 23b5b73cd8
commit 28ee63eed5
3 changed files with 12 additions and 3 deletions

1
.gitignore vendored
View File

@@ -3,3 +3,4 @@
/strongswan-5.9.1.tar.bz2 /strongswan-5.9.1.tar.bz2
/strongswan-5.9.2.tar.bz2 /strongswan-5.9.2.tar.bz2
/strongswan-5.9.3.tar.bz2 /strongswan-5.9.3.tar.bz2
/strongswan-5.9.4.tar.bz2

View File

@@ -1 +1 @@
SHA512 (strongswan-5.9.3.tar.bz2) = 09bd78225415422c8f55c9f0dea2ca70111f42f0deacfaaac30c422109ff64180f6a6a47c6bc54238e8403f0b2f8520122c1eabbeda3f915427fadb838a5df51 SHA512 (strongswan-5.9.4.tar.bz2) = 796356c1d5c1ad410f0ed944ab4a131076d26f120ec6fa57796fe4060b0741201199625883ddc9ebd8a7ad299495f073cec76a6780ebd8f375605aae16750cf3

View File

@@ -2,8 +2,8 @@
#%%define prerelease dr1 #%%define prerelease dr1
Name: strongswan Name: strongswan
Version: 5.9.3 Version: 5.9.4
Release: 4%{?dist} Release: 1%{?dist}
Summary: An OpenSource IPsec-based VPN and TNC solution Summary: An OpenSource IPsec-based VPN and TNC solution
License: GPLv2+ License: GPLv2+
URL: http://www.strongswan.org/ URL: http://www.strongswan.org/
@@ -33,6 +33,8 @@ BuildRequires: libgcrypt-devel
BuildRequires: systemd-devel BuildRequires: systemd-devel
BuildRequires: iptables-devel BuildRequires: iptables-devel
BuildRequires: libcap-devel BuildRequires: libcap-devel
BuildRequires: tpm2-tss-devel
Recommends: tpm2-tools
BuildRequires: NetworkManager-libnm-devel BuildRequires: NetworkManager-libnm-devel
Requires(post): systemd Requires(post): systemd
@@ -276,6 +278,12 @@ install -D -m 0644 %{SOURCE1} %{buildroot}/%{_tmpfilesdir}/strongswan.conf
%{_libexecdir}/strongswan/charon-nm %{_libexecdir}/strongswan/charon-nm
%changelog %changelog
* Wed Oct 20 2021 Paul Wouters <paul.wouters@aiven.io> - 5.9.4-1
- Resolves: rhbz#2015165 strongswan-5.9.4 is available
- Resolves: rhbz#2015611 CVE-2021-41990 strongswan: gmp plugin: integer overflow via a crafted certificate with an RSASSA-PSS signature
- Resolves: rhbz#2015614 CVE-2021-41991 strongswan: integer overflow when replacing certificates in cache
- Add BuildRequire for tpm2-tss-devel and weak dependency for tpm2-tools
* Tue Sep 14 2021 Sahana Prasad <sahana@redhat.com> - 5.9.3-4 * Tue Sep 14 2021 Sahana Prasad <sahana@redhat.com> - 5.9.3-4
- Rebuilt with OpenSSL 3.0.0 - Rebuilt with OpenSSL 3.0.0