USN-6772-1: strongSwan vulnerability
14 May 2024
A valid certificate could be used to impersonate any other user or system under certain setups.
Releases
Packages
- strongswan - IPsec VPN solution
Details
Jan Schermer discovered that strongSwan incorrectly validated client
certificates in certain configurations. A remote attacker could possibly
use this issue to bypass access controls.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 22.04
In general, a standard system update will make all the necessary changes.