new file mode 100644

@@ -0,0 +1,27 @@

+From 0acd1ab4d08d53d80393b1a37b8781f6e7b2b996 Mon Sep 17 00:00:00 2001

+From: Tobias Brunner <tobias@strongswan.org>

+Date: Tue, 13 Mar 2018 18:54:08 +0100

+Subject: [PATCH] stroke: Ensure a minimum message length

+

+---

+ src/libcharon/plugins/stroke/stroke_socket.c | 5 +++++

+ 1 file changed, 5 insertions(+)

+

+diff --git a/src/libcharon/plugins/stroke/stroke_socket.c b/src/libcharon/plugins/stroke/stroke_socket.c

+index c568440..1e7f210 100644

+--- a/src/libcharon/plugins/stroke/stroke_socket.c

+@@ -627,6 +627,11 @@ static bool on_accept(private_stroke_socket_t *this, stream_t *stream)

+ 		}

+ 		return FALSE;

+ 	}

++	if (len < offsetof(stroke_msg_t, buffer))

++	{

++		DBG1(DBG_CFG, "invalid stroke message length %d", len);

++		return FALSE;

++	}

+ 

+ 	/* read message (we need an additional byte to terminate the buffer) */

+ 	msg = malloc(len + 1);

+-- 

+1.9.1

@@ -1,7 +1,7 @@

 Summary:          The OpenSource IPsec-based VPN Solution

 Name:             strongswan

 Version:          5.5.2

-Release:          3%{?dist}

+Release:          4%{?dist}

 License:          GPLv2+

 URL:              https://www.strongswan.org/

 Group:            System Environment/Security

@@ -12,6 +12,7 @@ Source0:          https://download.strongswan.org/%{name}-%{version}.tar.bz2

 Patch0:           CVE-2017-9022.patch

 Patch1:           CVE-2017-9023.patch

 Patch2:           CVE-2017-11185.patch

+Patch3:           CVE-2018-5388.patch

 BuildRequires:    autoconf

@@ -23,6 +24,7 @@ strongSwan is a complete IPsec implementation for Linux 2.6, 3.x, and 4.x kernel

 %patch0 -p1

 %patch1 -p1

 %patch2 -p1

+%patch3 -p1

 %build

 ./configure --prefix=%{_prefix} --sysconfdir=%{_sysconfdir}

@@ -52,6 +54,8 @@ rm -rf %{buildroot}/*

 %{_datadir}/strongswan/*

 %changelog

+*   Mon Jul 23 2018 Ajay Kaher <akaher@vmware.com> 5.5.2-4

+-   Fix CVE-2018-5388

 *   Tue Oct 10 2017 Dheeraj Shetty <dheerajs@vmware.com> 5.5.2-3

 -   Fix CVE-2017-11185 CVE-2017-9022 and CVE-2017-9023

 *   Thu Aug 24 2017 Alexey Makhalov <amakhalov@vmware.com> 5.5.2-2