DeforaNetworks/fwknop
DeforaNetworks/fwknop
3
0
Fork 0
Code Releases Activity

minor 2.6.2 release date change

Browse Source
This commit is contained in:
Michael Rash 2014-04-28 20:26:05 -04:00
parent 000e02f039
commit d996c45141
2 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
ChangeLog
View File

@ -1,13 +1,14 @@
fwknop-2.6.2 (04/27/2014):
fwknop-2.6.2 (04/28/2014):
- [libfko] fix double free bug in SPA parser discovered with the new
python SPA payload fuzzer (see the 'spa_encoding_fuzzing' branch which
is not merged into the master branch yet). This bug could be triggered
in fwknopd with a malicious SPA payload, but only when GnuPG is used and
when an attacker is in possession of valid GnuPG keys listed in the
access.conf file. In other words, and arbitrary attacker cannot trigger
access.conf file. In other words, an arbitrary attacker cannot trigger
this bug. Further, when Rijndael is used for SPA packet encryption, this
bug cannot be triggered at all due to an length/format check towards the
end of _rijndael_decrypt().
end of _rijndael_decrypt(). This bug was introduced in the 2.6.1
development series, and no previous versions of fwknop are affected.
fwknop-2.6.1 (04/12/2014):
- Updated copyright and authorship information to include a standard

2
fwknop.spec
View File

@ -142,7 +142,7 @@ fi
%config(noreplace) %attr(0600,root,root) %{_sysconfdir}/fwknop/access.conf
%changelog
* Sun Apr 27 2014 <mbr@cipherdyne.org> - 2.6.2
* Mon Apr 28 2014 <mbr@cipherdyne.org> - 2.6.2
- fwknop-2.6.2 release.
* Sat Apr 12 2014 <mbr@cipherdyne.org> - 2.6.1