Merge lp:~sdeziel/ubuntu-cve-tracker/strongswan into lp:~ubuntu-security/ubuntu-cve-tracker/master

[Simon Déziel]

It's my first MP on this repo so please let me know if I missed something.

[Steve Beattie (sbeattie)]

Looks fine, merged with a couple of touchups. Thanks1

review: Approve

[Simon Déziel (sdeziel)]

Thanks Steve.

=== added file 'active/CVE-2017-11185'
--- active/CVE-2017-11185	1970-01-01 00:00:00 +0000
+++ active/CVE-2017-11185	2017-08-14 16:23:00 +0000
@@ -0,0 +1,26 @@
+Candidate: CVE-2017-11185
+PublicDate: 2017-08-14
+References: 
+ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11185
+ https://www.strongswan.org/blog/2017/08/14/strongswan-vulnerability-(cve-2017-11185).html
+Description: 
+ The gmp plugin in strongSwan before 5.6.0 can cause a null-pointer dereference
+ when verifying specific RSA signatures in certificates or IKE authentication
+ resulting in a denial of service.
+Ubuntu-Description: 
+Notes: Remote code execution is not possible.
+Bugs: 
+Priority: medium
+Discovered-by: oss-fuzz
+Assigned-to: 
+
+Patches_strongswan:
+ upstream: https://wiki.strongswan.org/projects/strongswan/repository/revisions/ef5c37fcdf47273feea320091598135688df4ef7
+ upstream: https://download.strongswan.org/security/CVE-2017-11185/strongswan-4.4.0-5.5.3_gmp_mpz_export.patch
+upstream_strongswan: released (5.6.0)
+precise/esm_strongswan: DNE
+trusty_strongswan: needed
+vivid/ubuntu-core_strongswan: DNE
+xenial_strongswan: needed
+zesty_strongswan: needed
+devel_strongswan: needed