Ubuntu Security Notice USN-6772-1
2024-5-14 23:16:9 Author: packetstormsecurity.com(查看原文) 阅读量:0 收藏

==========================================================================
Ubuntu Security Notice USN-6772-1
May 14, 2024

strongswan vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 22.04 LTS

Summary:

Fraudulent security certificates could allow access controls to be
bypassed.

Software Description:
- strongswan: IPsec VPN solution

Details:

Jan Schermer discovered that strongSwan incorrectly validated client
certificates in certain configurations. A remote attacker could possibly
use this issue to bypass access controls.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS
libstrongswan 5.9.5-2ubuntu2.3
strongswan 5.9.5-2ubuntu2.3

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-6772-1
CVE-2022-4967

Package Information:
https://launchpad.net/ubuntu/+source/strongswan/5.9.5-2ubuntu2.3


文章来源: https://packetstormsecurity.com/files/178566/USN-6772-1.txt
如有侵权请联系:admin#unsafe.sh