File _patchinfo of Package patchinfo.657

<patchinfo incident="657">
  <issue id="933591" tracker="bnc">VUL-0: CVE-2015-4171: strongswan: rogue servers vulnerability</issue>
  <issue id="CVE-2015-4171" tracker="cve" />
  <category>security</category>
  <rating>moderate</rating>
  <packager>mtomaschewski</packager>
  <description>Strongswan was updated to fix one security issue.

The following vulnerability was fixed:

* CVE-2015-4171: Rogue servers were able to authenticate themselves with certificate issued by any CA the client trusts, to gain user credentials from a client in certain IKEv2 setups (bsc#933591)
</description>
  <summary>Security update for strongswan</summary>
</patchinfo>
openSUSE Build Service is sponsored by