-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 13 Apr 2026 11:19:15 +0200 Source: strongswan Binary: charon-cmd charon-cmd-dbgsym charon-systemd charon-systemd-dbgsym libcharon-extauth-plugins libcharon-extauth-plugins-dbgsym libcharon-extra-plugins libcharon-extra-plugins-dbgsym libstrongswan libstrongswan-dbgsym libstrongswan-extra-plugins libstrongswan-extra-plugins-dbgsym libstrongswan-standard-plugins libstrongswan-standard-plugins-dbgsym strongswan-charon strongswan-charon-dbgsym strongswan-libcharon strongswan-libcharon-dbgsym strongswan-nm strongswan-nm-dbgsym strongswan-pki strongswan-pki-dbgsym strongswan-starter strongswan-starter-dbgsym strongswan-swanctl strongswan-swanctl-dbgsym Architecture: armel Version: 5.9.8-5+deb12u4 Distribution: bookworm-security Urgency: medium Maintainer: arm Build Daemon (arm-conova-03) Changed-By: Yves-Alexis Perez Description: charon-cmd - standalone IPsec client charon-systemd - strongSwan IPsec client, systemd support libcharon-extauth-plugins - strongSwan charon library (extended authentication plugins) libcharon-extra-plugins - strongSwan charon library (extra plugins) libstrongswan - strongSwan utility and crypto library libstrongswan-extra-plugins - strongSwan utility and crypto library (extra plugins) libstrongswan-standard-plugins - strongSwan utility and crypto library (standard plugins) strongswan-charon - strongSwan Internet Key Exchange daemon strongswan-libcharon - strongSwan charon library strongswan-nm - strongSwan plugin to interact with NetworkManager strongswan-pki - strongSwan IPsec client, pki command strongswan-starter - strongSwan daemon starter and configuration file parser strongswan-swanctl - strongSwan IPsec client, swanctl command Changes: strongswan (5.9.8-5+deb12u4) bookworm-security; urgency=medium . * d/patches: add fix for integer underflow in libsimaka when handling EAP-SIM/AKA attributes (CVE-2026-35330) * d/patches: add fix for integer underflow in libradius when handling RADIUS attributes (CVE-2026-35333) * d/patches: add fix for NULL-pointer dereference in libtls when handling ECDH public values (CVE-2026-35332) * d/patches: add fix for infinite loop in libtls when handling supported versions TLS extension (CVE-2026-35328) * d/patches: add fix for NULL-pointer dereference in libstrongswan (pkcs5) and the pkcs7 plugin when processing padding in PKCS#7 (CVE-2026-35329) * d/patches: add fix for acceptation of authentication certificates violating name constraints (CVE-2026-35331) * d/patches: add fix for possible NULL-pointer dereference in gmp plugin for RSA decryption (CVE-2026-35334) Checksums-Sha1: d450ef2352dfcbc87d3c887c79c848f20a39c7b6 84092 charon-cmd-dbgsym_5.9.8-5+deb12u4_armel.deb 022bb5a8b8702cce6f037526583655ca44b56909 87280 charon-cmd_5.9.8-5+deb12u4_armel.deb 9f9130db5e060af05b96920027f22cf21fa03955 52572 charon-systemd-dbgsym_5.9.8-5+deb12u4_armel.deb b4a6c49355aa4a58e7b9408230a1fb93bf9f344b 84380 charon-systemd_5.9.8-5+deb12u4_armel.deb ab3a330344b8b1877fa3f5efb67b97045a45b5c0 104468 libcharon-extauth-plugins-dbgsym_5.9.8-5+deb12u4_armel.deb 91a841f4c084051aae462c7f110ed4315bd373fa 88268 libcharon-extauth-plugins_5.9.8-5+deb12u4_armel.deb d84ab1fe186de3614e1957e0fb3d64dede618cbc 1482716 libcharon-extra-plugins-dbgsym_5.9.8-5+deb12u4_armel.deb 6b42bb085a90b23220d56c18e5dbd4bf8716c051 246896 libcharon-extra-plugins_5.9.8-5+deb12u4_armel.deb dde2f3c3ced02f9222a60999c6c5decd8431484b 1460360 libstrongswan-dbgsym_5.9.8-5+deb12u4_armel.deb a2563d18f4bae01d18e0c9231920e4d5729e5387 529176 libstrongswan-extra-plugins-dbgsym_5.9.8-5+deb12u4_armel.deb eddd7a142c734ea7ed81aefbd3ce7d6e472bd8df 255504 libstrongswan-extra-plugins_5.9.8-5+deb12u4_armel.deb 15ecf44ddca9ca8582c3c41fa36d7339301e30b2 265136 libstrongswan-standard-plugins-dbgsym_5.9.8-5+deb12u4_armel.deb f220aa186a28b4bedfe7f76c86e3687c5fd49a61 117616 libstrongswan-standard-plugins_5.9.8-5+deb12u4_armel.deb 7672179dd01a9e7d8e03771e2b2253b8496ecaf4 379152 libstrongswan_5.9.8-5+deb12u4_armel.deb 0033c181ac4cf04c4626c1bbbc59a88cf0850292 52744 strongswan-charon-dbgsym_5.9.8-5+deb12u4_armel.deb 6815aad47b250b67683a7fd679dfb112e2573247 88888 strongswan-charon_5.9.8-5+deb12u4_armel.deb 8f47d42e37cb71b271a2e1799166a7354d635b28 1063816 strongswan-libcharon-dbgsym_5.9.8-5+deb12u4_armel.deb 55e608e585dd969845980d03aa9563e0ef1abad7 279256 strongswan-libcharon_5.9.8-5+deb12u4_armel.deb afa0765e4f61b2f7530fa244bf78002e3b3d506b 116148 strongswan-nm-dbgsym_5.9.8-5+deb12u4_armel.deb 379c196fb20c47c2245264648fa6463d8b46806d 89616 strongswan-nm_5.9.8-5+deb12u4_armel.deb 83f28f9cfc7237dc09e900eab2313ddeb5418124 127428 strongswan-pki-dbgsym_5.9.8-5+deb12u4_armel.deb 677994591ce729188f3de89162f9d566817e4c5e 139868 strongswan-pki_5.9.8-5+deb12u4_armel.deb ce1156f2d7132178d32ba7545c806c0335093a05 296988 strongswan-starter-dbgsym_5.9.8-5+deb12u4_armel.deb 800910eb4dd31d4e3e2de22da8f9244b8742f70f 204296 strongswan-starter_5.9.8-5+deb12u4_armel.deb ac1a63d91aed6636220c33a0d2727b43c95509eb 341332 strongswan-swanctl-dbgsym_5.9.8-5+deb12u4_armel.deb bdd1c27e980531443432626aa186ea7f58fae959 170852 strongswan-swanctl_5.9.8-5+deb12u4_armel.deb b45c786037af67399feaa8a4e66c157ec4fc6d40 17980 strongswan_5.9.8-5+deb12u4_armel-buildd.buildinfo Checksums-Sha256: f752c8b5d354dc1eaa48f2af58461b19b4882160b14c9a270c604921ce641abd 84092 charon-cmd-dbgsym_5.9.8-5+deb12u4_armel.deb 81e264954800c14fb9e5ac8a64bc8ef658f789742c5f65dc0e34224c03a64477 87280 charon-cmd_5.9.8-5+deb12u4_armel.deb a8a69a846a2687f0bb8e8ca9ae9d615fafafcb576bfaba00891395dcfdc27448 52572 charon-systemd-dbgsym_5.9.8-5+deb12u4_armel.deb 806ab1787f27fffacf5c97cd95365c0518218de5c082236655d7b8770e922409 84380 charon-systemd_5.9.8-5+deb12u4_armel.deb d53c0256045f2aafc0cf6fef7eae7d8a68e87f0f4b9c7d301259ae99af737e55 104468 libcharon-extauth-plugins-dbgsym_5.9.8-5+deb12u4_armel.deb 8523b461d8438f98711799acc952cd1ee01b51e5150486b5582d9d2054466db0 88268 libcharon-extauth-plugins_5.9.8-5+deb12u4_armel.deb 05ee5ca019745c1dddb13c57cdbc5e765b1fead4492472816894f41ce304f0ec 1482716 libcharon-extra-plugins-dbgsym_5.9.8-5+deb12u4_armel.deb 334923be1ab7fd1ddd57ae86593d54696c04574fdc3dc084e648ed996415f8c0 246896 libcharon-extra-plugins_5.9.8-5+deb12u4_armel.deb de01078e31a04a5101f712fd922f4ef53ef82e2e06724721764b84d86f73de55 1460360 libstrongswan-dbgsym_5.9.8-5+deb12u4_armel.deb 7352152ac5e829c010f2160aa1d7d8d79fdc21eccffbbea24e734a9f9d79cbd3 529176 libstrongswan-extra-plugins-dbgsym_5.9.8-5+deb12u4_armel.deb c590b01de44c819f806dd20543aa4fbf31595acad5269c8b23a4fb854cd13224 255504 libstrongswan-extra-plugins_5.9.8-5+deb12u4_armel.deb 43fff7f77731fbadd0970dfe1094dd39024e77ee08126829f4effddc9ebfb8ba 265136 libstrongswan-standard-plugins-dbgsym_5.9.8-5+deb12u4_armel.deb 8a304e34d29ce6482f1d85c6a6480f0c0db1a6cfcfb76ebf43d1ee7e3de1cfb3 117616 libstrongswan-standard-plugins_5.9.8-5+deb12u4_armel.deb 42131364d0fdbda016b6504788922276e70e2f68758881f3713c7833cbe4be3a 379152 libstrongswan_5.9.8-5+deb12u4_armel.deb 345f5076faaf0ecb202c96793763c848ebbf789d8067fc4dbe7899f0a245bb63 52744 strongswan-charon-dbgsym_5.9.8-5+deb12u4_armel.deb 0f76bfd302a37ee258c3a35271af6230a7e808232fff7bf3cc934ae7a0e5939b 88888 strongswan-charon_5.9.8-5+deb12u4_armel.deb 637427287a79f46ac189ed11506aa39ea047e616a2811af5c905e8676c80e361 1063816 strongswan-libcharon-dbgsym_5.9.8-5+deb12u4_armel.deb 8b4fab04df8e275c7400289be7519a6d4651445ba3b9a1d5b00b816ef6067c8b 279256 strongswan-libcharon_5.9.8-5+deb12u4_armel.deb 519c9e7d883b32df3b8584f11f4a23400a17aa53e7cfdf2098c9f4aaea7c8ddf 116148 strongswan-nm-dbgsym_5.9.8-5+deb12u4_armel.deb 13b71cc2bb8eaa5684c13ba16c5cdfd930aaa2dc1c4a3dda86906accf33aae98 89616 strongswan-nm_5.9.8-5+deb12u4_armel.deb df2b35077c3a4425e4789b5e6ebc3d95dd0683922fd1065030d540ca632bb011 127428 strongswan-pki-dbgsym_5.9.8-5+deb12u4_armel.deb c40fa5e77a97bff1f36d0c476ad6a28ce320c7c3f39e10ea73cd632de527e41d 139868 strongswan-pki_5.9.8-5+deb12u4_armel.deb 9b672ac1e8a9076f3d71435d8a7975692d505c1905ab00cc0296b02786f67e6e 296988 strongswan-starter-dbgsym_5.9.8-5+deb12u4_armel.deb bccffcac4c88d541046c4a64d7f3a208127f7e3b1dd3b0eac18b159cb3f7f5f2 204296 strongswan-starter_5.9.8-5+deb12u4_armel.deb 5eae96351eeefeb064dfb61b8f3f2467fcc0da1317cb3de1376306510f1ba4d3 341332 strongswan-swanctl-dbgsym_5.9.8-5+deb12u4_armel.deb 01cfdc5e36b9a1014b381ee2df47134666dd82bede348c86cc78557d3d2cab74 170852 strongswan-swanctl_5.9.8-5+deb12u4_armel.deb 34f2bad839f7f22a061b326a8efbf389e730393171062f38b00be69dee94f796 17980 strongswan_5.9.8-5+deb12u4_armel-buildd.buildinfo Files: b98b7531e79d9e8dd378df6dc5946ce2 84092 debug optional charon-cmd-dbgsym_5.9.8-5+deb12u4_armel.deb 084f37d48c9324fd161da3942ba39f79 87280 net optional charon-cmd_5.9.8-5+deb12u4_armel.deb 94db1c5b54cd6a047557f92e0bd02382 52572 debug optional charon-systemd-dbgsym_5.9.8-5+deb12u4_armel.deb a37fe0b2f90e17380e48f68c9bee50e7 84380 net optional charon-systemd_5.9.8-5+deb12u4_armel.deb e01bc873c3424362de0acda90e34eb30 104468 debug optional libcharon-extauth-plugins-dbgsym_5.9.8-5+deb12u4_armel.deb 7b153cb482f0fcd6761e9885ca0949c5 88268 net optional libcharon-extauth-plugins_5.9.8-5+deb12u4_armel.deb d88ebacc7850f130dcbcaf01b835cccd 1482716 debug optional libcharon-extra-plugins-dbgsym_5.9.8-5+deb12u4_armel.deb 6f954c073ad219dec394972083319423 246896 net optional libcharon-extra-plugins_5.9.8-5+deb12u4_armel.deb af501cbd71cc03b4a656b8a0988c1aca 1460360 debug optional libstrongswan-dbgsym_5.9.8-5+deb12u4_armel.deb dc9bbcd8e2f4fb05d3f69541b1af6ec3 529176 debug optional libstrongswan-extra-plugins-dbgsym_5.9.8-5+deb12u4_armel.deb ab704fe401e17fd94a0acf6516e75f27 255504 net optional libstrongswan-extra-plugins_5.9.8-5+deb12u4_armel.deb 99e15a8710deff9c63f07b66669b7ef9 265136 debug optional libstrongswan-standard-plugins-dbgsym_5.9.8-5+deb12u4_armel.deb 9f78695fd82d7857d481da505eb87610 117616 net optional libstrongswan-standard-plugins_5.9.8-5+deb12u4_armel.deb 1993ed69ba3903447abec1921fb4abf5 379152 net optional libstrongswan_5.9.8-5+deb12u4_armel.deb 80d6743b8479786e69a6656a419bb737 52744 debug optional strongswan-charon-dbgsym_5.9.8-5+deb12u4_armel.deb 281b19e49d168f9f541a093e64c5133c 88888 net optional strongswan-charon_5.9.8-5+deb12u4_armel.deb daa4b84e21ca1949b348345832c9b6d7 1063816 debug optional strongswan-libcharon-dbgsym_5.9.8-5+deb12u4_armel.deb 79ad8e4742d58ce203c5f3ce55c4ad03 279256 net optional strongswan-libcharon_5.9.8-5+deb12u4_armel.deb d321316a724773897ac4e8d8e8ccffa2 116148 debug optional strongswan-nm-dbgsym_5.9.8-5+deb12u4_armel.deb b91ed078e5e06e131b2c2d398dab37a3 89616 net optional strongswan-nm_5.9.8-5+deb12u4_armel.deb c90fa4f79b920d64b8b0912bd4607feb 127428 debug optional strongswan-pki-dbgsym_5.9.8-5+deb12u4_armel.deb ee7b4f4bc3d70eb4a422ddad6afeab9c 139868 net optional strongswan-pki_5.9.8-5+deb12u4_armel.deb 5c00c0fcc359718222f402904944809d 296988 debug optional strongswan-starter-dbgsym_5.9.8-5+deb12u4_armel.deb 8bd37e9e0a9aa42aaf694620cc56ee24 204296 net optional strongswan-starter_5.9.8-5+deb12u4_armel.deb 7f3ae12dd21377885f615296ec342984 341332 debug optional strongswan-swanctl-dbgsym_5.9.8-5+deb12u4_armel.deb 569f4f51167ff87b0c10f3c527f87a06 170852 net optional strongswan-swanctl_5.9.8-5+deb12u4_armel.deb adef3c9fb6b48ce1d2322f96d2650da3 17980 net optional strongswan_5.9.8-5+deb12u4_armel-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEElFiH1oZRZh1t4FSiXVp1sEH/1mIFAmned5cACgkQXVp1sEH/ 1mI8Kw//ep25qyDPtYt+7SB5B98/RzOcd/2ptjhpNL620MTV5tisPRGlhJj2uGM6 CpF/qriddnhs4fRCyek6tYilcPTWvYDd5TsuPOMhmc1tCU2mkMnP4BVh1ibbBbXM 2Ncei9kskGLo1MbNYQXWzQJuEWjagBPNcAzYzJ4TibElR7FIWg0xAiPiUji+Ip8L NwOnOukKdwyIEB/U9+9tb/zl1ZDS4PMDRjwnuwT6/E7ZoUgmJQwiCj5K4CnEgLHp ck2/LOsdsEGWffUN/8Gz2RJjIY1CxuJr6DwjW/ZKl0l5mRs/G1d4e8yV+HMLAOLv fphfWanjpJNnOU9hvf6SayFOb5tv9y601eG9iyhbOVbPphbiH5mxJy/mNeJoyOiL i9E44aFMXVLErt2lAPDq7hdINfGuerngtgGUQRY3NPV6K2UOwMibWTR1gfOy3MhF voXFYOttwpk5xb7Kd5nYiVvwB0lcl/jmAVfi/SEF09Low6FNClwu5xuC/HwFPXXM yRjcmWjnS5u/44iKeDT36+574iOPRwx5NOrihwVwnkQmFWFPazpZTP0+rhhcgtrM qdWjbGUPKJw/yMHOQxIaR1CFieySJvpZcGiKJQW9qu3Y4bS5jH1AY+2buO13G0+K qvnPbAQON8rP93iLjzz7dodgG3OVqKx55lnlUEQUxwSoVXIdEBk= =wKQ8 -----END PGP SIGNATURE-----