[strongSwan] Notice regardings OpenWRT and StrongSwan

Noel Kuntze noel at familie-kuntze.de
Wed Jul 9 13:09:43 CEST 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello list,

Strongswan 5.1.3 and OpenSSL 1.0.1h were just backported to Attitude Adjustement (12.09).
It is no longer needed to use trunk to get the fixed packages.

Regards,
Noel Kuntze

GPG Key id: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
Am 06.07.2014 19:21, schrieb Noel Kuntze:
>
> Hello list,
>
> OpenWRT did not backport the fix for CVE-2014-2338 to the 12.09 release "Attitude Adjustment".
> This means, that if you're using the stable repository for the release and using StrongSwan,
> you need to temporarily switch to the trunk repository to get the fixed version.
>
> To check if you are using the stable version, check the file /etc/opkg.conf and look for the
> "src/gz" line. If you are using the release repository, it looks similiar to this:
> "src/gz snapshots http://downloads.openwrt.org/attitude_adjustment/12.09/HEREISYOURARCHITECTURE/generic/packages".
> To change the repository, change the third argument to this: "http://downloads.openwrt.org/snapshots/trunk/HEREISYOURARCHITECTURE/packages/".
>
> Be aware, that if you are using the trunk repository, you won't be able to download kernel modules, as the ones in the trunk repository are built for the newest kernel built.
>
> Regards,
> Noel Kuntze
>
>
> _______________________________________________
> Users mailing list
> Users at lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=5Xco
-----END PGP SIGNATURE-----



More information about the Users mailing list