-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 13 Apr 2026 11:19:15 +0200 Source: strongswan Binary: charon-cmd charon-cmd-dbgsym charon-systemd charon-systemd-dbgsym libcharon-extauth-plugins libcharon-extauth-plugins-dbgsym libcharon-extra-plugins libcharon-extra-plugins-dbgsym libstrongswan libstrongswan-dbgsym libstrongswan-extra-plugins libstrongswan-extra-plugins-dbgsym libstrongswan-standard-plugins libstrongswan-standard-plugins-dbgsym strongswan-charon strongswan-charon-dbgsym strongswan-libcharon strongswan-libcharon-dbgsym strongswan-nm strongswan-nm-dbgsym strongswan-pki strongswan-pki-dbgsym strongswan-starter strongswan-starter-dbgsym strongswan-swanctl strongswan-swanctl-dbgsym Architecture: arm64 Version: 5.9.8-5+deb12u4 Distribution: bookworm-security Urgency: medium Maintainer: arm Build Daemon (arm-ubc-01) Changed-By: Yves-Alexis Perez Description: charon-cmd - standalone IPsec client charon-systemd - strongSwan IPsec client, systemd support libcharon-extauth-plugins - strongSwan charon library (extended authentication plugins) libcharon-extra-plugins - strongSwan charon library (extra plugins) libstrongswan - strongSwan utility and crypto library libstrongswan-extra-plugins - strongSwan utility and crypto library (extra plugins) libstrongswan-standard-plugins - strongSwan utility and crypto library (standard plugins) strongswan-charon - strongSwan Internet Key Exchange daemon strongswan-libcharon - strongSwan charon library strongswan-nm - strongSwan plugin to interact with NetworkManager strongswan-pki - strongSwan IPsec client, pki command strongswan-starter - strongSwan daemon starter and configuration file parser strongswan-swanctl - strongSwan IPsec client, swanctl command Changes: strongswan (5.9.8-5+deb12u4) bookworm-security; urgency=medium . * d/patches: add fix for integer underflow in libsimaka when handling EAP-SIM/AKA attributes (CVE-2026-35330) * d/patches: add fix for integer underflow in libradius when handling RADIUS attributes (CVE-2026-35333) * d/patches: add fix for NULL-pointer dereference in libtls when handling ECDH public values (CVE-2026-35332) * d/patches: add fix for infinite loop in libtls when handling supported versions TLS extension (CVE-2026-35328) * d/patches: add fix for NULL-pointer dereference in libstrongswan (pkcs5) and the pkcs7 plugin when processing padding in PKCS#7 (CVE-2026-35329) * d/patches: add fix for acceptation of authentication certificates violating name constraints (CVE-2026-35331) * d/patches: add fix for possible NULL-pointer dereference in gmp plugin for RSA decryption (CVE-2026-35334) Checksums-Sha1: d3aa5e89765d2bcbdfe45908560cd6b9f6003bc6 84440 charon-cmd-dbgsym_5.9.8-5+deb12u4_arm64.deb b7478b19cbfce741b97d38aa5a5c2f14c9786c1a 88448 charon-cmd_5.9.8-5+deb12u4_arm64.deb 953e23d5fefa981cdd4373e64efd8996b52bb3d9 53024 charon-systemd-dbgsym_5.9.8-5+deb12u4_arm64.deb 6c569e3e7a44794f5a9ec5e273f73ba87ba7205b 84912 charon-systemd_5.9.8-5+deb12u4_arm64.deb 67bcabff5867f695a09350ec4158ba698921baeb 117764 libcharon-extauth-plugins-dbgsym_5.9.8-5+deb12u4_arm64.deb f4f1e47c6e9f7c29cebbfead95d0638271fe703d 88812 libcharon-extauth-plugins_5.9.8-5+deb12u4_arm64.deb 08cf1c0f05231117408ba2078de9c32f15fce50a 1502812 libcharon-extra-plugins-dbgsym_5.9.8-5+deb12u4_arm64.deb 45b679e840be824daae65074ca625a4cc69bdee1 264340 libcharon-extra-plugins_5.9.8-5+deb12u4_arm64.deb 3d9da3b903dd10e0a6342fbbcc32631b7dd2ad08 1473700 libstrongswan-dbgsym_5.9.8-5+deb12u4_arm64.deb 2049be690b2970a9a0fa35c8ec6abfc8bee108c0 530300 libstrongswan-extra-plugins-dbgsym_5.9.8-5+deb12u4_arm64.deb f5ce6bb7426d6271b51e315d0e8eee204da89c44 258716 libstrongswan-extra-plugins_5.9.8-5+deb12u4_arm64.deb 730042f20dc7557eea01e12f7ce8c1dfd1eb9d4b 271280 libstrongswan-standard-plugins-dbgsym_5.9.8-5+deb12u4_arm64.deb 74785a692faceb25a42eeb9cb0af4007a73777d0 124124 libstrongswan-standard-plugins_5.9.8-5+deb12u4_arm64.deb 65f3edc482b81887308c087ffe05687b3bb0072c 414256 libstrongswan_5.9.8-5+deb12u4_arm64.deb 1cde4c1ef92f62329279b7ab29b44065acab94e8 53380 strongswan-charon-dbgsym_5.9.8-5+deb12u4_arm64.deb a329518f103aab182d6405f2d7ae07b4847e157f 89376 strongswan-charon_5.9.8-5+deb12u4_arm64.deb 210ac0c4c4b889e3fe12c1cfe56c316facdd8785 1055232 strongswan-libcharon-dbgsym_5.9.8-5+deb12u4_arm64.deb 11e8517b9d6946dd28509a6fe1c418af8b9bcf39 300700 strongswan-libcharon_5.9.8-5+deb12u4_arm64.deb eb3a5ed4dd8bff0a97956e97572f16bbee0842d9 115340 strongswan-nm-dbgsym_5.9.8-5+deb12u4_arm64.deb 29ae037aae932ab1d8e30a28d12ca013a157c3c3 90844 strongswan-nm_5.9.8-5+deb12u4_arm64.deb 64222fae69fac0f10b2eaa10d6623917db19108e 131284 strongswan-pki-dbgsym_5.9.8-5+deb12u4_arm64.deb 74f5a654aeda61be42cd7deeed08aab82a99038f 142220 strongswan-pki_5.9.8-5+deb12u4_arm64.deb f18b9d2b49ae22975ff8d8261f4590288b6d8c91 304524 strongswan-starter-dbgsym_5.9.8-5+deb12u4_arm64.deb 3c7b5a9271425401958341512a6c0899b80693c3 209856 strongswan-starter_5.9.8-5+deb12u4_arm64.deb 4475dda0cf66210628b8a8099bb0e42dab884994 366664 strongswan-swanctl-dbgsym_5.9.8-5+deb12u4_arm64.deb c60e6683b083d2c3dcb131258633a40a578af510 177916 strongswan-swanctl_5.9.8-5+deb12u4_arm64.deb a2c00e1d3179dd69960a8b107e36f59f2398463e 18138 strongswan_5.9.8-5+deb12u4_arm64-buildd.buildinfo Checksums-Sha256: f8e8ed788bc62a56130f63842e172f1302c3c3d173a7a187c7034df1b2543daa 84440 charon-cmd-dbgsym_5.9.8-5+deb12u4_arm64.deb f3790fba0b35bafcf01334822863056acfc3378be90f6b1e799d26eb14f96e39 88448 charon-cmd_5.9.8-5+deb12u4_arm64.deb 0277df3def8dbb9e694189ffe3b25029fc194e5535112aab0f4f538dd1c9f9a0 53024 charon-systemd-dbgsym_5.9.8-5+deb12u4_arm64.deb fd33375455f054e5599f9b5f5208d5b445e2ed51761158611903b001fc75f656 84912 charon-systemd_5.9.8-5+deb12u4_arm64.deb b38fabc91d2b0f3eea362cbae66efa6bcf011fb84ac9ba69235513cf6041c1aa 117764 libcharon-extauth-plugins-dbgsym_5.9.8-5+deb12u4_arm64.deb abd37ac3619b9ce1e7599ec0fa4ac4d2744ef4b90fde73bc749502cd1b606b57 88812 libcharon-extauth-plugins_5.9.8-5+deb12u4_arm64.deb 3304553e0a83a068eb5654eafe27fdab2596471851a0e85b9377b65d82b5688c 1502812 libcharon-extra-plugins-dbgsym_5.9.8-5+deb12u4_arm64.deb 6c51f643d6477cbf192e19a776c65b1c1cce5775c969082cf8e1f2f4dfe06ed7 264340 libcharon-extra-plugins_5.9.8-5+deb12u4_arm64.deb 645f4898aedc94aa6b1336c129f6cf9b31b5fdeddb3601cd367d6291b3baebe4 1473700 libstrongswan-dbgsym_5.9.8-5+deb12u4_arm64.deb e807ab2ab164275ebf75de6b58e60960f13e60b4438feb39b9c7e25c058a9c58 530300 libstrongswan-extra-plugins-dbgsym_5.9.8-5+deb12u4_arm64.deb e587c147ca2943fb1b4d0d406fbebd567acddcffb82d533d01365255020f310f 258716 libstrongswan-extra-plugins_5.9.8-5+deb12u4_arm64.deb 170ae7b2a36f5a1822a6c6d0379f729f63f165661103162a00ac7689e2d34fc9 271280 libstrongswan-standard-plugins-dbgsym_5.9.8-5+deb12u4_arm64.deb c9fc838eb5a5e5a30e4b69fb4b6b7ae31992524c7e87382c49d30af66bbc3d25 124124 libstrongswan-standard-plugins_5.9.8-5+deb12u4_arm64.deb a704c8342b488949b85fa7b88613758e5c97fe5317b15d4efbb25a57f20b217c 414256 libstrongswan_5.9.8-5+deb12u4_arm64.deb a387bd0fedf27de06b6af3455403b84fda0165488e2b3e6247add4cd82018d61 53380 strongswan-charon-dbgsym_5.9.8-5+deb12u4_arm64.deb 91f0fe96f2f83acc306049d65af7c9122e7de2157f21403626922a54182f26cc 89376 strongswan-charon_5.9.8-5+deb12u4_arm64.deb 6cc5e4f5b71bf009da4b04a2afe4440fd2844ae6c9dd192485c281cf9ef13934 1055232 strongswan-libcharon-dbgsym_5.9.8-5+deb12u4_arm64.deb 3b094d34405ea04af798963e2ebd3e63576338e4122132098d988a8b0248a9b8 300700 strongswan-libcharon_5.9.8-5+deb12u4_arm64.deb d3426e0aaa89f9c3a33bc4b92da118d760e0907445bbe9cf6da0fde29cb7bf14 115340 strongswan-nm-dbgsym_5.9.8-5+deb12u4_arm64.deb 64446274d7e4fddc2905fc6a31ee91795551fe2a98de0c657e4e39fc739f1b9d 90844 strongswan-nm_5.9.8-5+deb12u4_arm64.deb bc1cfbf8608b153bb670e8d155c83cc11607ac5e271df325426cf5968a98100a 131284 strongswan-pki-dbgsym_5.9.8-5+deb12u4_arm64.deb 4435bdf4ea573d3316588bcf74dc15114d918b922fd380ff22b8ad5dd7296497 142220 strongswan-pki_5.9.8-5+deb12u4_arm64.deb 9924836e1a97a566e5b3605dba81f71fc7289aa98fa38c565c99d10ca10789de 304524 strongswan-starter-dbgsym_5.9.8-5+deb12u4_arm64.deb 0b57e870d213147b3bd92be27e2b0eea28dac55ebfeea1250bb53e0c6b2eabe5 209856 strongswan-starter_5.9.8-5+deb12u4_arm64.deb 2a2d96945b707913d462e57ae5d806a503ae81eb3e10e018e448ddd501b9e508 366664 strongswan-swanctl-dbgsym_5.9.8-5+deb12u4_arm64.deb f7e71751a1a393d521822f2d1259c8d4307c551f2e96dcc4a18565bf41840651 177916 strongswan-swanctl_5.9.8-5+deb12u4_arm64.deb 99d29fcca39f2b44f3e3892382f174ab78eff6dbab6418383002985cab4982c4 18138 strongswan_5.9.8-5+deb12u4_arm64-buildd.buildinfo Files: 0b0601e5cd6f4e3321a348761f7bf475 84440 debug optional charon-cmd-dbgsym_5.9.8-5+deb12u4_arm64.deb 7f4253d20adff6b02bf6ab9e8b54e365 88448 net optional charon-cmd_5.9.8-5+deb12u4_arm64.deb 1f432f2d20867f3b6f71dd92ce7045cd 53024 debug optional charon-systemd-dbgsym_5.9.8-5+deb12u4_arm64.deb 76e76ae2b72b7c5d39ae3b6a510f8bf6 84912 net optional charon-systemd_5.9.8-5+deb12u4_arm64.deb c296724f60781d21123ed9c2562df5b4 117764 debug optional libcharon-extauth-plugins-dbgsym_5.9.8-5+deb12u4_arm64.deb b306329427dbfd7d7d81e860ec46d69a 88812 net optional libcharon-extauth-plugins_5.9.8-5+deb12u4_arm64.deb 92d2d23d907145b74879b4468caaa29b 1502812 debug optional libcharon-extra-plugins-dbgsym_5.9.8-5+deb12u4_arm64.deb a2277a6166ebcc920ffcc32647546927 264340 net optional libcharon-extra-plugins_5.9.8-5+deb12u4_arm64.deb dcdd44c488a479274ad3c1fb91afac87 1473700 debug optional libstrongswan-dbgsym_5.9.8-5+deb12u4_arm64.deb f53434a587cfa62270d8677069ff76be 530300 debug optional libstrongswan-extra-plugins-dbgsym_5.9.8-5+deb12u4_arm64.deb 808a8cd2e99778efd10e30baf9bc41f5 258716 net optional libstrongswan-extra-plugins_5.9.8-5+deb12u4_arm64.deb 36f7e189ad7b6c92c140026df5d7ec25 271280 debug optional libstrongswan-standard-plugins-dbgsym_5.9.8-5+deb12u4_arm64.deb 61885414224818eef5d94586fa195c7d 124124 net optional libstrongswan-standard-plugins_5.9.8-5+deb12u4_arm64.deb 1a51c1f5900a8989ab8fe26e17451913 414256 net optional libstrongswan_5.9.8-5+deb12u4_arm64.deb 6782199097a32d44117b5d7953fd8142 53380 debug optional strongswan-charon-dbgsym_5.9.8-5+deb12u4_arm64.deb cb49be54ebbfef448dca9875a7d89dff 89376 net optional strongswan-charon_5.9.8-5+deb12u4_arm64.deb 931dcd2647e105799e879ca58d9ece59 1055232 debug optional strongswan-libcharon-dbgsym_5.9.8-5+deb12u4_arm64.deb c05a2d72e7c0469ca6a5b1f2884000ae 300700 net optional strongswan-libcharon_5.9.8-5+deb12u4_arm64.deb ac58db1d423c5b7bceb3b99c44017b01 115340 debug optional strongswan-nm-dbgsym_5.9.8-5+deb12u4_arm64.deb 0f3b346e9cf60c5b9a6245654ca94c0f 90844 net optional strongswan-nm_5.9.8-5+deb12u4_arm64.deb 322f0944392d2a0673aed875e6c255b6 131284 debug optional strongswan-pki-dbgsym_5.9.8-5+deb12u4_arm64.deb ea0d1c01dab7c1c1b975899378472cf3 142220 net optional strongswan-pki_5.9.8-5+deb12u4_arm64.deb e3a501bb2bce7a110008c6f0faf613fb 304524 debug optional strongswan-starter-dbgsym_5.9.8-5+deb12u4_arm64.deb 5879706a4d7267fae69d6bec29df85a2 209856 net optional strongswan-starter_5.9.8-5+deb12u4_arm64.deb baab21eccd9fc4fc5b434c1f3443e733 366664 debug optional strongswan-swanctl-dbgsym_5.9.8-5+deb12u4_arm64.deb 7f7d9bbc48a5ee9dd9fbcb3f65e748e2 177916 net optional strongswan-swanctl_5.9.8-5+deb12u4_arm64.deb fcaf1afb0031b700f888bb6985d12c39 18138 net optional strongswan_5.9.8-5+deb12u4_arm64-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0Ha//LlsGOpbQ/H4xqCFmsOWgoYFAmned2kACgkQxqCFmsOW goZAVQ//ZcGuODVpzUJ/JDw6DLlmvIRL7k4JHe/CTAy0UvpMSyziqs/609xwzpum xppXTGFg17OOnWxovOd2SrjF83ku2rBxAw/BKHM6f1GkSXxO8zXXnsu5Koyh9A+p w4i4j4gwqhSzrOtpgSukzShf+aV5DinXcIGBqI185TL7WOov3sq2mTqI/tYModHv rfSzpWNKEBjTrwTSP7IWoSZIQE6TawpuhtIqL7Or20M4Wtk4EHRaheOVh7lwCTcr y2VQZqcVFQGeEGlw7hPZAmxEe0Jr8H9JIkl5K8DKasgHznUMcmaCqHAIzGq7q+aI twEpDwLMxrjk8QxUUCfO4ZT5zjVzLpc8rL4+HQ636FPALf0IchuHMhEgx1ONZ1Ps 7fkazIZsxXLFUQC6o/5D3NWOTURZr4bX/7OkwUA83n/nLNKnXJ3USrzus8Vop+gj gxZ5uSIL6GILfyYL0UP4mMeFjHY3XZ423IEH2ysHeDIa2zIz5YUH/J9XoXzIK6sZ 3vRYpXHB4Po6Wkx6EunGduMu4xr3yyBeL5z7qEv2Mptc7/7nlJTT1PLLcq/N15Xy 73yMo3hmA2mwJabgMK2kJuU5IeIRiUUJZmB4bDFaAxlt9ZiBR2XuG7qQZYOhQcRL Fpb2yvzGb7q24oDi647Obj79rIBETjD9myntR0qNBFt2tvKKe1s= =k24J -----END PGP SIGNATURE-----