Date: Mon, 13 Jun 2022 07:52:26 +0000 From: bugzilla-noreply@freebsd.org To: ports-bugs@FreeBSD.org Subject: [Bug 263748] security/strongswan: Update to 5.9.6 Message-ID: <bug-263748-7788-KqrBl0jaD3@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-263748-7788@https.bugs.freebsd.org/bugzilla/> References: <bug-263748-7788@https.bugs.freebsd.org/bugzilla/>
next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D263748 --- Comment #12 from Tobias Brunner <tobias@strongswan.org> --- It's the same issue discussed here (XCBC, via the default-enabled xcbc plug= in, requiring the kdf plugin, which is also default-enabled): https://github.com/strongswan/strongswan/issues/1026#issuecomment-1119440199 The next release will include two changes to avoid this: one demotes the XC= BC and CMAC PRFs so HMACs are preferred, another force-enables the kdf plugin = if a plugin is enabled that provides any of these PRFs. --=20 You are receiving this mail because: You are on the CC list for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-263748-7788-KqrBl0jaD3>