USN-2811-1: strongSwan vulnerability

Releases

• Ubuntu 15.10
• Ubuntu 15.04
• Ubuntu 14.04 ESM

Packages

• strongswan - IPsec VPN solution

Details

It was discovered that the strongSwan eap-mschapv2 plugin incorrectly
handled state. A remote attacker could use this issue to bypass
authentication.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 15.10

• strongswan-plugin-eap-mschapv2 - 5.1.2-0ubuntu6.2

Ubuntu 15.04

• strongswan-plugin-eap-mschapv2 - 5.1.2-0ubuntu5.3

Ubuntu 14.04

• strongswan-plugin-eap-mschapv2 - 5.1.2-0ubuntu2.4

In general, a standard system update will make all the necessary changes.

References

• CVE-2015-8023