[Bug 263748] security/strongswan: Update to 5.9.6
- In reply to: bugzilla-noreply_a_freebsd.org: "[Bug 263748] security/strongswan: Update to 5.9.6"
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Mon, 13 Jun 2022 07:52:26 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=263748 --- Comment #12 from Tobias Brunner <tobias@strongswan.org> --- It's the same issue discussed here (XCBC, via the default-enabled xcbc plugin, requiring the kdf plugin, which is also default-enabled): https://github.com/strongswan/strongswan/issues/1026#issuecomment-1119440199 The next release will include two changes to avoid this: one demotes the XCBC and CMAC PRFs so HMACs are preferred, another force-enables the kdf plugin if a plugin is enabled that provides any of these PRFs. -- You are receiving this mail because: You are on the CC list for the bug.