Copied from
ubuntu zesty in
Private PPA for Ubuntu Security Team
by Ubuntu Archive Robot
Changelog
strongswan (5.5.1-1ubuntu3.1) zesty-security; urgency=medium
* SECURITY UPDATE: Insufficient Input Validation in gmp Plugin
- debian/patches/CVE-2017-9022.patch: make sure the modulus is odd and
the exponent not zero in
src/libstrongswan/plugins/gmp/gmp_rsa_public_key.c.
- CVE-2017-9022
* SECURITY UPDATE: Incorrect Handling of CHOICE types in ASN.1 parser and
x509 plugin
- debian/patches/CVE-2017-9023.patch: fix CHOICE parsing in
src/libstrongswan/asn1/asn1_parser.*,
src/libstrongswan/plugins/x509/x509_cert.c.
- CVE-2017-9023
-- Marc Deslauriers <email address hidden> Wed, 24 May 2017 14:53:29 -0400