Commit 918e052ae1 for strongswan.org

commit 918e052ae12abc2b5b39905a8bf669e25ff57d50
Author: Tobias Brunner <tobias@strongswan.org>
Date:   Mon Jul 13 16:52:44 2026 +0200

    eap-md5: Avoid memory leak caused by repeated challenges

    Fixes: 4b403e7672a1 ("merged EAP-MD5 into trunk")

diff --git a/src/libcharon/plugins/eap_md5/eap_md5.c b/src/libcharon/plugins/eap_md5/eap_md5.c
index 7b0b157722..3752ad4a7d 100644
--- a/src/libcharon/plugins/eap_md5/eap_md5.c
+++ b/src/libcharon/plugins/eap_md5/eap_md5.c
@@ -157,6 +157,7 @@ METHOD(eap_method_t, process_peer, status_t,
 		DBG1(DBG_IKE, "received invalid EAP-MD5 message");
 		return FAILED;
 	}
+	chunk_free(&this->challenge);
 	this->challenge = chunk_clone(chunk_create(data.ptr + 6, data.ptr[5]));
 	if (hash_challenge(this, &response, this->peer, this->server) != SUCCESS)
 	{