-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 13 Apr 2026 11:19:15 +0200 Source: strongswan Binary: charon-cmd charon-cmd-dbgsym charon-systemd charon-systemd-dbgsym libcharon-extauth-plugins libcharon-extauth-plugins-dbgsym libcharon-extra-plugins libcharon-extra-plugins-dbgsym libstrongswan libstrongswan-dbgsym libstrongswan-extra-plugins libstrongswan-extra-plugins-dbgsym libstrongswan-standard-plugins libstrongswan-standard-plugins-dbgsym strongswan-charon strongswan-charon-dbgsym strongswan-libcharon strongswan-libcharon-dbgsym strongswan-nm strongswan-nm-dbgsym strongswan-pki strongswan-pki-dbgsym strongswan-starter strongswan-starter-dbgsym strongswan-swanctl strongswan-swanctl-dbgsym Architecture: armhf Version: 5.9.8-5+deb12u4 Distribution: bookworm-security Urgency: medium Maintainer: arm Build Daemon (arm-conova-01) Changed-By: Yves-Alexis Perez Description: charon-cmd - standalone IPsec client charon-systemd - strongSwan IPsec client, systemd support libcharon-extauth-plugins - strongSwan charon library (extended authentication plugins) libcharon-extra-plugins - strongSwan charon library (extra plugins) libstrongswan - strongSwan utility and crypto library libstrongswan-extra-plugins - strongSwan utility and crypto library (extra plugins) libstrongswan-standard-plugins - strongSwan utility and crypto library (standard plugins) strongswan-charon - strongSwan Internet Key Exchange daemon strongswan-libcharon - strongSwan charon library strongswan-nm - strongSwan plugin to interact with NetworkManager strongswan-pki - strongSwan IPsec client, pki command strongswan-starter - strongSwan daemon starter and configuration file parser strongswan-swanctl - strongSwan IPsec client, swanctl command Changes: strongswan (5.9.8-5+deb12u4) bookworm-security; urgency=medium . * d/patches: add fix for integer underflow in libsimaka when handling EAP-SIM/AKA attributes (CVE-2026-35330) * d/patches: add fix for integer underflow in libradius when handling RADIUS attributes (CVE-2026-35333) * d/patches: add fix for NULL-pointer dereference in libtls when handling ECDH public values (CVE-2026-35332) * d/patches: add fix for infinite loop in libtls when handling supported versions TLS extension (CVE-2026-35328) * d/patches: add fix for NULL-pointer dereference in libstrongswan (pkcs5) and the pkcs7 plugin when processing padding in PKCS#7 (CVE-2026-35329) * d/patches: add fix for acceptation of authentication certificates violating name constraints (CVE-2026-35331) * d/patches: add fix for possible NULL-pointer dereference in gmp plugin for RSA decryption (CVE-2026-35334) Checksums-Sha1: 0c2ee4274b74b98abac6d24e2c634d31397ba149 84308 charon-cmd-dbgsym_5.9.8-5+deb12u4_armhf.deb 65aecd61177c604a0fce49f57547ca87c0e09f51 87184 charon-cmd_5.9.8-5+deb12u4_armhf.deb 167742385433678b40152f33ea9e535db0aef723 52548 charon-systemd-dbgsym_5.9.8-5+deb12u4_armhf.deb 82bda4ae958094c89b12a57b6f61665fe988d043 84300 charon-systemd_5.9.8-5+deb12u4_armhf.deb 1d7ab76c736dce3982e59103245cd6dc5236a0ed 104680 libcharon-extauth-plugins-dbgsym_5.9.8-5+deb12u4_armhf.deb f987219d9144cbc9d39d140a28de59584c575578 88264 libcharon-extauth-plugins_5.9.8-5+deb12u4_armhf.deb 597ea4c1da96bcc88aa3c916bf8332d8e5f5ac5d 1485728 libcharon-extra-plugins-dbgsym_5.9.8-5+deb12u4_armhf.deb 23d0bf2f1d505376b9fc269d6775c53aad1c83ff 247144 libcharon-extra-plugins_5.9.8-5+deb12u4_armhf.deb 679d97a208b7f14c258bd27896459ae7368a6932 1464244 libstrongswan-dbgsym_5.9.8-5+deb12u4_armhf.deb 6cdcc5bcae916d41433e809fd514978f020fcb05 530140 libstrongswan-extra-plugins-dbgsym_5.9.8-5+deb12u4_armhf.deb 8fda089b4e3a9209f42d98f6058c21eff855c845 252484 libstrongswan-extra-plugins_5.9.8-5+deb12u4_armhf.deb a5142f6706b6a64ba38d5ad35c983fe66c0c77fc 264664 libstrongswan-standard-plugins-dbgsym_5.9.8-5+deb12u4_armhf.deb 08097c7706c79c4fe4d8a575473c3c63b352d8a3 117372 libstrongswan-standard-plugins_5.9.8-5+deb12u4_armhf.deb 3ace1598314c51cc884d8db62f28241a8fd1a3d9 382504 libstrongswan_5.9.8-5+deb12u4_armhf.deb 10d5474b3acadd00e643ab96711996e2886302b4 52824 strongswan-charon-dbgsym_5.9.8-5+deb12u4_armhf.deb 45644ca40e283af2a937d7ae521f39db27c7f24f 88888 strongswan-charon_5.9.8-5+deb12u4_armhf.deb d72c4cde47a6f86b29a0799d5f212516187428ef 1071772 strongswan-libcharon-dbgsym_5.9.8-5+deb12u4_armhf.deb a145d53d29f21a2636680b0a80b97fc4a963b857 282976 strongswan-libcharon_5.9.8-5+deb12u4_armhf.deb ac788e289cab3f8c729f32bd91095f42f3c8f0b7 116188 strongswan-nm-dbgsym_5.9.8-5+deb12u4_armhf.deb a20c57c690dc398f868f5d4fd5b7371dcd09a7d8 89508 strongswan-nm_5.9.8-5+deb12u4_armhf.deb d865be65c819e28b63e03a5185a9816aea04439c 129056 strongswan-pki-dbgsym_5.9.8-5+deb12u4_armhf.deb 08cf2345dedc408a3687bef5f8a27c3c9f4e0234 140808 strongswan-pki_5.9.8-5+deb12u4_armhf.deb 61943dcd36e90b284e3776eefef0446a51851308 299004 strongswan-starter-dbgsym_5.9.8-5+deb12u4_armhf.deb c629cd4fb5f71e47ecc7411cbae1950421b254af 204660 strongswan-starter_5.9.8-5+deb12u4_armhf.deb 225aa540636ae2e0d457c3865ad67b728a2d7591 342808 strongswan-swanctl-dbgsym_5.9.8-5+deb12u4_armhf.deb 7e2dee1e2af5a1c60911e6e4d2e435574350644e 171892 strongswan-swanctl_5.9.8-5+deb12u4_armhf.deb 623d41e8b2a2a5623407c4dab4d6a79144e90486 17982 strongswan_5.9.8-5+deb12u4_armhf-buildd.buildinfo Checksums-Sha256: c56c547b5cc3925bf91c2f3b8cc0c84bdb0ceafdf8e8e0383c91410d2fa6bfbf 84308 charon-cmd-dbgsym_5.9.8-5+deb12u4_armhf.deb 18c3ffc8d73701625ac4a78b07112cbfceb14a25ddd9373a15aacfceffabd552 87184 charon-cmd_5.9.8-5+deb12u4_armhf.deb aeef00b9bc785b44b9d0d91b3b76d60283c99002a23427ad30ee8ca8c9166bf1 52548 charon-systemd-dbgsym_5.9.8-5+deb12u4_armhf.deb aa2f4a3ed6e14d0b766e8e19531398e25f45ea1c6dedd1d480b644f87b8f03f2 84300 charon-systemd_5.9.8-5+deb12u4_armhf.deb 355e15ad5dcb65a43be0a86cbf30a5f94efd2e94689d72a2ca148547a29a79e1 104680 libcharon-extauth-plugins-dbgsym_5.9.8-5+deb12u4_armhf.deb b1323a0a9d194d79184077be12fa7cb163318dd75646480ec5bc06f6f566128c 88264 libcharon-extauth-plugins_5.9.8-5+deb12u4_armhf.deb 8e5f9b89e02fbc2b11bc04efe3dac1a302bb0610992758c3db08ebf7dd0136a8 1485728 libcharon-extra-plugins-dbgsym_5.9.8-5+deb12u4_armhf.deb 995fa818e4ae546d32adc26ffde9451e3391006ac10c27d51e513e4901afed17 247144 libcharon-extra-plugins_5.9.8-5+deb12u4_armhf.deb cfa170284104af84113928f24c69b45afea4c1e3478e7a9656aa741a1557aeec 1464244 libstrongswan-dbgsym_5.9.8-5+deb12u4_armhf.deb 5490aa56728ed18d33f5dc1d72d3fa8b08ab89b0ff59652780dfef2f458f68c8 530140 libstrongswan-extra-plugins-dbgsym_5.9.8-5+deb12u4_armhf.deb 86a1d9899d52a0f6bfdd6d8bdbe77ac130c1bb76fe10b659049ecb9cf285a4c8 252484 libstrongswan-extra-plugins_5.9.8-5+deb12u4_armhf.deb af7417ddbd4d16479944a10fe1a88e246dc9c6f996e09b228d7684ff0e8314e5 264664 libstrongswan-standard-plugins-dbgsym_5.9.8-5+deb12u4_armhf.deb 97e3b2e507aacb054b20cb78124b5f938fbe0949efbad5f5ce3cc414b6fb16e5 117372 libstrongswan-standard-plugins_5.9.8-5+deb12u4_armhf.deb f7b05c82c8fccf427dd49727ce7b98985b4496ec89713ea0c7b554738cd36a87 382504 libstrongswan_5.9.8-5+deb12u4_armhf.deb 41cf56b82db62086ddd79aeb63c1cb1f87232dbb1f6db50c9de7ab7fd03e6423 52824 strongswan-charon-dbgsym_5.9.8-5+deb12u4_armhf.deb 504069a49b2f54fd7ab422ee0ae24b2d076b86d9c64e0a08867f46a0d6fca1a8 88888 strongswan-charon_5.9.8-5+deb12u4_armhf.deb ec7ad5735fee2d363149c26e4c4b00924b3ccb2c2a2db96796dd4a54e6fa66ba 1071772 strongswan-libcharon-dbgsym_5.9.8-5+deb12u4_armhf.deb 26c596c92f166b6afaedd43eb7bdcc34a511a56eb7fdbbb09d1b4aeae68c2c6f 282976 strongswan-libcharon_5.9.8-5+deb12u4_armhf.deb 77f03878179399ceb8a59b2f4338b553d2d08fef592c51866888b6e3887c2d88 116188 strongswan-nm-dbgsym_5.9.8-5+deb12u4_armhf.deb 22a303808048e2b3b2d041d7ccb00e68d9eaab8ce7b4174deb486a71c70cc9a7 89508 strongswan-nm_5.9.8-5+deb12u4_armhf.deb 5247fd9a16e94d8fdef3bb790b6ff66f4b550789bf142bde1389c6ee6b8f5c16 129056 strongswan-pki-dbgsym_5.9.8-5+deb12u4_armhf.deb eca5042f5f60136e4127df771111e58a875fab4bdacde54288db012658bd6e39 140808 strongswan-pki_5.9.8-5+deb12u4_armhf.deb f8051f27c487e52527327a270b84024ec6e8ac1b97f7476df01ce9eccc0bd703 299004 strongswan-starter-dbgsym_5.9.8-5+deb12u4_armhf.deb 2f5196bb10513a7d63caab10221b79dac3ee87d93e6e91cd2df04d7fb38ec670 204660 strongswan-starter_5.9.8-5+deb12u4_armhf.deb 4f58485886091eed96a26f5e721614e36f13e951be830500031ce197c2b20983 342808 strongswan-swanctl-dbgsym_5.9.8-5+deb12u4_armhf.deb c664a86d8c35563187eded52e5bb945f7fdcd87539610f323f471625b8423983 171892 strongswan-swanctl_5.9.8-5+deb12u4_armhf.deb 2ebf55825b22f0847dc63fcc226f4634e30e5495917f1e706b181a2f8d649ff4 17982 strongswan_5.9.8-5+deb12u4_armhf-buildd.buildinfo Files: bc1d5ad4eea453fef7fc8ccdb38de81d 84308 debug optional charon-cmd-dbgsym_5.9.8-5+deb12u4_armhf.deb 5b67ef84e7f07ed5b04a4b3b0d482386 87184 net optional charon-cmd_5.9.8-5+deb12u4_armhf.deb 91aee1e8fb93a0e30c82ca59b7b0ecea 52548 debug optional charon-systemd-dbgsym_5.9.8-5+deb12u4_armhf.deb 2a656fc7176d57cbb61696f56653e928 84300 net optional charon-systemd_5.9.8-5+deb12u4_armhf.deb 231011168c670b09cd8b6034d9c74b43 104680 debug optional libcharon-extauth-plugins-dbgsym_5.9.8-5+deb12u4_armhf.deb 0d26ca167b03eac261c7463828dd4a5d 88264 net optional libcharon-extauth-plugins_5.9.8-5+deb12u4_armhf.deb e72a978f802f5960eb6309563a35eb0b 1485728 debug optional libcharon-extra-plugins-dbgsym_5.9.8-5+deb12u4_armhf.deb 6504516915ac26ddf6ad882a2c3d94b1 247144 net optional libcharon-extra-plugins_5.9.8-5+deb12u4_armhf.deb 0ac20e5514581ddcb119519752befe67 1464244 debug optional libstrongswan-dbgsym_5.9.8-5+deb12u4_armhf.deb a7ee7e87188b5844ad985855f3e66cac 530140 debug optional libstrongswan-extra-plugins-dbgsym_5.9.8-5+deb12u4_armhf.deb 4c48e3fe14e28361a5c5c4beb5dddeb0 252484 net optional libstrongswan-extra-plugins_5.9.8-5+deb12u4_armhf.deb a09f603b1e01359d37a180df67bb0bc2 264664 debug optional libstrongswan-standard-plugins-dbgsym_5.9.8-5+deb12u4_armhf.deb 67d340525a42427facb237e45c2372eb 117372 net optional libstrongswan-standard-plugins_5.9.8-5+deb12u4_armhf.deb 1cac00cd4d9c29f45ce2508e6b4bf783 382504 net optional libstrongswan_5.9.8-5+deb12u4_armhf.deb 93bac7199fdc4a9adc4234cc901fdbab 52824 debug optional strongswan-charon-dbgsym_5.9.8-5+deb12u4_armhf.deb 8ff5bd4b8d74e0f96c24115721bbfbf4 88888 net optional strongswan-charon_5.9.8-5+deb12u4_armhf.deb 454ab34b68e26175b5316a8259b50db6 1071772 debug optional strongswan-libcharon-dbgsym_5.9.8-5+deb12u4_armhf.deb aef398cbb94bf34a8d97397e280ec4f1 282976 net optional strongswan-libcharon_5.9.8-5+deb12u4_armhf.deb 54fbed8db2309b276b259ffc993b08fe 116188 debug optional strongswan-nm-dbgsym_5.9.8-5+deb12u4_armhf.deb ffb9a1ae1388fdf3d6255cc45b75f657 89508 net optional strongswan-nm_5.9.8-5+deb12u4_armhf.deb d94006a572f8e5c136edf68c4c0c239f 129056 debug optional strongswan-pki-dbgsym_5.9.8-5+deb12u4_armhf.deb 80de2179e4a9a7bbf7cb9404711f6be6 140808 net optional strongswan-pki_5.9.8-5+deb12u4_armhf.deb 210ce63f4c8733dcd9092feff7618c47 299004 debug optional strongswan-starter-dbgsym_5.9.8-5+deb12u4_armhf.deb 84b76133d092d83de2e92fd1fe43891c 204660 net optional strongswan-starter_5.9.8-5+deb12u4_armhf.deb 511458bf6ee05bd51c9250324acd1b35 342808 debug optional strongswan-swanctl-dbgsym_5.9.8-5+deb12u4_armhf.deb a5621a76d2b0a81337573705d36481e2 171892 net optional strongswan-swanctl_5.9.8-5+deb12u4_armhf.deb f86ca2d0233f81db497fc840ea372b80 17982 net optional strongswan_5.9.8-5+deb12u4_armhf-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEO4qAQUSIo2p/kVRf8U6eOZMpj68FAmned10ACgkQ8U6eOZMp j6+ApRAAsx58U4VqKi+LQWEnt6M5+4gsjdG7AgxNZyx+N1a4in0iUiZDthBjWtsU umZDrNeiErZOKpdzLWwP8RuqTnn+C4XEPOcRdexklc3SMrrSDC4i8qXFhvQJqJdQ dPx0ikTS2PhnPDVGr41jh+RavapX4TrJH7+tt8TLkKVYoYp7X79A1yBfDeXqT9lv VX2yF6ZcZmrlJVTzMx7BlpYSZSD+eaemL1yIqpnVjk3LW1dXOn9qsFHfA8LWrY+i CqDVV+KM//n7JZMj5B9bmEZ60kyUoxf0o5rCY8N576AaQBc/dVXeOm0WT6+N7eGE gP0/5nGmhddsfDDVeSS7YdXDp//lmmRdTKJDqQjImc0pJmcflLQU4EKGczKIAsPz Nk2aPnIMMAq1RFU/SfbvgRHw93yBAlT7s0mC/ZhlOAkOKA4laxuGtkT/VIq6zi8h z7TbQAcaBW1pnj1n+KbBSih27MY7b5xiHrTRKmME53pt8ChD3pIbwJ0ivVD3LKiF e62SQX+My8K45r33gBJwKSTcXSAHLWqZbnDCpabLv0+chUXIBpw3AWY/dxsdoy8q 4PFgbqdvinxgtNvGFfpBnr9ouAoSsQV5S5iAiJ1X5Vh1FhO1SUchCu2fiTDTPUh1 pNVXKxKGL+iZUpFrP5daJMrnJFE2j4CN8E3iZj0+OxRAqJ+zW9w= =LFOb -----END PGP SIGNATURE-----