Latest patch to ipsec-tools to prevent remote denial of service vulnerability
-
Patch discussed at http://sourceforge.net/mailarchive/forum.php?thread_name=20130121132706.33580a30%40vostro&forum_name=ipsec-tools-devel
< /* $NetBSD: isakmp_inf.c,v 1.49 2013/01/24 06:47:50 tteras Exp $ */
–-/* $NetBSD: isakmp_inf.c,v 1.47.2.1 2012/08/29 12:01:56 tteras Exp $ */
495c495
< if((iph1 == NULL || !iph1->rmconf->weak_phase1_check) && !encrypted) {
if(!iph1->rmconf->weak_phase1_check && !encrypted) {
Full sources at: http://ftp.vim.org/NetBSD/NetBSD-current/src/crypto/dist/ipsec-tools/src/racoon/
-
I added that to the builds yesterday, should be in the current snapshots.
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.