added info about two DoS fixes

This commit is contained in:
Andreas Steffen 2009-06-18 19:29:16 +02:00
parent 1ea31180a0
commit 126f2130fb
1 changed files with 5 additions and 0 deletions

5
NEWS
View File

@ -12,6 +12,11 @@ strongswan-4.3.2
Thanks to the openssl plugin, the ECP Diffie-Hellman groups 19, 20, 21, 25, and
26 as well as ECDSA-256, ECDSA-384, and ECDSA-521 authentication can be used
with IKEv1.
- Applying their fuzzing tool, the Orange Labs vulnerability research team found
another two DoS vulnerabilities, one in the rather old ASN.1 parser of Relative
Distinguished Names (RDNs) and a second one in the conversion of ASN.1 UTCTIME
and GENERALIZEDTIME strings to a time_t value.
strongswan-4.3.1