Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 10 replies
  • Subscribers 2 subscribers
  • Views 1637 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Up2Date 8.304 Soft-Release

AngeloC
Hi everyone, we have made available ASG V8.304 as a soft-release. This is specifically to address a vulnerability in IPSec which was recently published. As such, this security Up2Date should be applied as soon as possible if you use IPSec.
*Due to the security-related nature of this package, we will GA push this tomorrow, on the 24th of May. 

Up2Date 8.304 Details
News:
• Fix IPsec Vulnerability 

Remarks:
• System will be rebooted

Bugfixes:
• no Bugfixes in this release

Download:
Link: ftp://ftp.astaro.de/ASG/v8/up2date/u2d-sys-8.304.tgz.gpg
Size:  ~1.5MB
MD5: 77484d31557421f5e65d66438499ea8a


This thread was automatically locked due to age.
Parents
  • 0
    It is a vulnerability in the backend software that we use for IPSec VPN connections.  We were asked by the vendor not to publicly disclose the details until the official CVE is published within the next few days, in order not to possibly compromise other vendors systems that may use this same third party software.  In the interest of responsible disclosure, we cannot give details prior to the official public announcement.
    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
Reply
  • 0
    It is a vulnerability in the backend software that we use for IPSec VPN connections.  We were asked by the vendor not to publicly disclose the details until the official CVE is published within the next few days, in order not to possibly compromise other vendors systems that may use this same third party software.  In the interest of responsible disclosure, we cannot give details prior to the official public announcement.
    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
Children
No Data
Cookie Information Banner