From f73755663d5a9a7b63bb0c0b42fb472eb01bf07a Mon Sep 17 00:00:00 2001 From: Thomas Perale Date: Thu, 5 Feb 2026 20:04:10 +0100 Subject: [PATCH] package/strongswan: fix patch header Commit [1] introduced a patch to fix CVE-2025-62291. Since [2] the security patches neeed to reference the vulnerability with the `CVE: ` trailer in the patch header. [1] b009935e27 package/strongswan: add patch to fix CVE-2025-62291 [2] 1167d0ff3d docs/manual: mention CVE trailer Signed-off-by: Thomas Perale Signed-off-by: Marcus Hoffmann (cherry picked from commit 766a6e5c0ba77fbcb7c7141cb4f66be2d20dc7e7) Signed-off-by: Thomas Perale --- package/strongswan/0001-eap_mschapv2_failure_request_len.patch | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package/strongswan/0001-eap_mschapv2_failure_request_len.patch b/package/strongswan/0001-eap_mschapv2_failure_request_len.patch index 8442cc7816..7442c123c4 100644 --- a/package/strongswan/0001-eap_mschapv2_failure_request_len.patch +++ b/package/strongswan/0001-eap_mschapv2_failure_request_len.patch @@ -21,7 +21,7 @@ Ubuntu), the compiler will use __memcpy_chk(), which prevents that buffer overflow and causes the daemon to get aborted immediately instead. Fixes: f98cdf7a4765 ("adding plugin for EAP-MS-CHAPv2") -Fixes: CVE-2025-62291 +CVE: CVE-2025-62291 Upstream: https://github.com/strongswan/strongswan/commit/c687ada6a6f68913651e355fd09f906893096b32 Signed-off-by: Waldemar Brodkorb ---