Project

General

Profile

Actions

Todo #15050

closed

Update strongSwan to 5.9.11_3

Added by Jim Pingle 5 months ago. Updated 5 months ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
IPsec
Target version:
Start date:
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
23.09.1
Release Notes:
Default

Description

Update the strongSwan port from 5.9.11_2 to 5.9.11_3 which brings in a patch to address a potential vulnerability in charon-tkm. pfSense does not use charon-tkm, but since the patch is already there in the ports tree we may as well bring it in so that the port isn't flagged by tools such as pkg audit.

Actions #1

Updated by Jim Pingle 5 months ago

  • Status changed from New to Feedback
  • Assignee changed from Brad Davis to Jim Pingle
  • % Done changed from 0 to 100

Commits to bring strongSwan up to 5.9.11_3 are in both Plus 23.09.1 and CE 2.7.2 branches

Need to verify the version is correct in the next build and ensure it operates as expected.

Actions #2

Updated by Jim Pingle 5 months ago

  • Subject changed from Update strongSwan port to 5.9.11_3 to Update strongSwan to 5.9.11_3
Actions #3

Updated by Jim Pingle 5 months ago

  • Status changed from Feedback to Resolved

This version is present in RC builds and appears to be operating normally.

Actions

Also available in: Atom PDF