In Debian, no these can be dropped: - d/usr.lib.ipsec.charon, d/usr/sbin/charon-systemd: Add support for usr-merge, thanks to Christian Ehrhardt. LP: #1784023 * SECURITY UPDATE: Insufficient input validation in gmp plugin - debian/patches/strongswan-5.6.1-5.6.3_gmp-pkcs1-verify.patch CVE-2018-16151 CVE-2018-16152 * SECURITY UPDATE: Insufficient input validation in gmp plugin - debian/patches/strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch CVE-2018-17540
Part of our mass enabling is also in Debian as chapoly is enabled there now. But not yet the bulk of it (https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848890) so the merge stays big for now. ** Bug watch added: Debian Bug tracker #848890 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848890 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-16151 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-16152 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-17540 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1806401 Title: Please merge a 5.7.x version for Ubuntu 19.04 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/strongswan/+bug/1806401/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
