Project

General

Profile

Actions
Copy link

Todo #12934

closed
CW

Update strongSwan

Todo #12934: Update strongSwan

Added by Chris W over 4 years ago. Updated about 3 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
IPsec
Target version:
2.7.0
Start date:
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
22.05
Release Notes:
Force Exclusion

Description

Currently StrongSwan 5.9.4 is packaged in 22.01/2.6, and contains this vulnerability which was fixed in version 5.9.5.
https://www.tenable.com/plugins/nessus/157235
https://github.com/strongswan/strongswan/releases/tag/5.9.5

JP Updated by Jim Pingle over 4 years ago Actions
Copy link
 #1

  • Project changed from pfSense Docs to pfSense
  • Subject changed from Upgrade strongSwan to 5.9.5 or latest non-release candidate (CVE-2021-45079) to Update strongSwan
  • Category changed from VPN to IPsec
  • Target version set to 2.7.0
  • Plus Target Version set to 22.05
  • Release Notes set to Default

That vulnerability is not relevant to pfSense. It affects EAP clients, and pfSense can only act as an EAP server.

Still needs updated, but it is not a security issue.

JP Updated by Jim Pingle over 4 years ago Actions
Copy link
 #2

  • Status changed from New to Feedback

The update is done in the ports tree. It's in CE snapshots now, will be in the next Plus snapshots shortly.

[2.7.0-DEVELOPMENT][root@pfSense.home.arpa]/root: pkg info -x swan
strongswan-5.9.5

CC Updated by Christopher Cope over 4 years ago Actions
Copy link
 #3

Tested successfully on

22.05-DEVELOPMENT (amd64)
built on Wed Apr 06 16:45:59 UTC 2022
FreeBSD 12.3-STABLE

Output

[22.05-DEVELOPMENT][root@pfSense.home.arpa]/root: pkg info -x swan
strongswan-5.9.5

JP Updated by Jim Pingle over 4 years ago Actions
Copy link
 #4

  • Status changed from Feedback to Resolved

JP Updated by Jim Pingle about 3 years ago Actions
Copy link
 #5

  • Release Notes changed from Default to Force Exclusion
Actions
Copy link

Also available in: Atom