-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 13 Apr 2026 11:19:15 +0200
Source: strongswan
Binary: charon-cmd charon-cmd-dbgsym charon-systemd charon-systemd-dbgsym libcharon-extauth-plugins libcharon-extauth-plugins-dbgsym libcharon-extra-plugins libcharon-extra-plugins-dbgsym libstrongswan libstrongswan-dbgsym libstrongswan-extra-plugins libstrongswan-extra-plugins-dbgsym libstrongswan-standard-plugins libstrongswan-standard-plugins-dbgsym strongswan-charon strongswan-charon-dbgsym strongswan-libcharon strongswan-libcharon-dbgsym strongswan-nm strongswan-nm-dbgsym strongswan-pki strongswan-pki-dbgsym strongswan-starter strongswan-starter-dbgsym strongswan-swanctl strongswan-swanctl-dbgsym
Architecture: s390x
Version: 5.9.8-5+deb12u4
Distribution: bookworm-security
Urgency: medium
Maintainer: s390x Build Daemon (ziehrer) <buildd_s390x-ziehrer@buildd.debian.org>
Changed-By: Yves-Alexis Perez <corsac@debian.org>
Description:
 charon-cmd - standalone IPsec client
 charon-systemd - strongSwan IPsec client, systemd support
 libcharon-extauth-plugins - strongSwan charon library (extended authentication plugins)
 libcharon-extra-plugins - strongSwan charon library (extra plugins)
 libstrongswan - strongSwan utility and crypto library
 libstrongswan-extra-plugins - strongSwan utility and crypto library (extra plugins)
 libstrongswan-standard-plugins - strongSwan utility and crypto library (standard plugins)
 strongswan-charon - strongSwan Internet Key Exchange daemon
 strongswan-libcharon - strongSwan charon library
 strongswan-nm - strongSwan plugin to interact with NetworkManager
 strongswan-pki - strongSwan IPsec client, pki command
 strongswan-starter - strongSwan daemon starter and configuration file parser
 strongswan-swanctl - strongSwan IPsec client, swanctl command
Changes:
 strongswan (5.9.8-5+deb12u4) bookworm-security; urgency=medium
 .
   * d/patches: add fix for integer underflow in libsimaka when handling
     EAP-SIM/AKA attributes (CVE-2026-35330)
   * d/patches: add fix for integer underflow in libradius when handling RADIUS
     attributes (CVE-2026-35333)
   * d/patches: add fix for NULL-pointer dereference in libtls when handling
     ECDH public values (CVE-2026-35332)
   * d/patches: add fix for infinite loop in libtls when handling supported
     versions TLS extension (CVE-2026-35328)
   * d/patches: add fix for NULL-pointer dereference in libstrongswan (pkcs5)
     and the pkcs7 plugin when processing padding in PKCS#7 (CVE-2026-35329)
   * d/patches: add fix for acceptation of authentication certificates
     violating name constraints (CVE-2026-35331)
   * d/patches: add fix for possible NULL-pointer dereference in gmp plugin for
     RSA decryption (CVE-2026-35334)
Checksums-Sha1:
 77d010b48e2895829d3be565aad4ad3431f6b9e1 77460 charon-cmd-dbgsym_5.9.8-5+deb12u4_s390x.deb
 6bc7b69f35a6c0b24980e2362d133d29566458c1 87792 charon-cmd_5.9.8-5+deb12u4_s390x.deb
 ef3fa9a6e6b4ba9afe156971ed9038051a4192f2 52220 charon-systemd-dbgsym_5.9.8-5+deb12u4_s390x.deb
 f8c296db0291dd9a81da7b4d044f08dd1acccf71 84644 charon-systemd_5.9.8-5+deb12u4_s390x.deb
 ca6ed63b8b480e642d36c8fd84f37a9c85f98682 104212 libcharon-extauth-plugins-dbgsym_5.9.8-5+deb12u4_s390x.deb
 1b1c11afe53fd90b45d6f887cf7252345cd0f575 88992 libcharon-extauth-plugins_5.9.8-5+deb12u4_s390x.deb
 e33829f36ae07461c1a7432c7b411e60a74869a0 1462604 libcharon-extra-plugins-dbgsym_5.9.8-5+deb12u4_s390x.deb
 2174876235349cc25466d37c69cf72e641f7d7c8 260148 libcharon-extra-plugins_5.9.8-5+deb12u4_s390x.deb
 de6f3c4c23d0c96de72880509d606ee3f7a1e878 1434688 libstrongswan-dbgsym_5.9.8-5+deb12u4_s390x.deb
 5b0f7aeb9bfb0dfe867e51c45e3478df389e19d8 525720 libstrongswan-extra-plugins-dbgsym_5.9.8-5+deb12u4_s390x.deb
 8e404c50a2336fee474fdfadb5e11bb7d7f05ba0 260652 libstrongswan-extra-plugins_5.9.8-5+deb12u4_s390x.deb
 4b2b35a8c979062533684e884d06f6b8b73ef9ab 256736 libstrongswan-standard-plugins-dbgsym_5.9.8-5+deb12u4_s390x.deb
 aa57f45909306a6d37f14804bcf135847cc97f3b 122736 libstrongswan-standard-plugins_5.9.8-5+deb12u4_s390x.deb
 7e5c4ce82cb3cd97f240df486dca821269253201 408296 libstrongswan_5.9.8-5+deb12u4_s390x.deb
 caddfac913a8b0f1c4e78967aa2af22d29b3e707 52436 strongswan-charon-dbgsym_5.9.8-5+deb12u4_s390x.deb
 4dfca81f24cd81946da4c02cb4bff68d59ae7b56 88972 strongswan-charon_5.9.8-5+deb12u4_s390x.deb
 a42a25b127bcde6317d603758fc4c353dbd2407d 1023936 strongswan-libcharon-dbgsym_5.9.8-5+deb12u4_s390x.deb
 455451869c7c0d58171865c6183bce0b9eee8f23 297864 strongswan-libcharon_5.9.8-5+deb12u4_s390x.deb
 3b232003b3ad1f06e39cc65be60de0493d3ed077 99940 strongswan-nm-dbgsym_5.9.8-5+deb12u4_s390x.deb
 42da992cb7703d642d1318542c43dcada08833a4 90648 strongswan-nm_5.9.8-5+deb12u4_s390x.deb
 eb7057babbfff85c303c48ccccb1c2dd148c8d65 122508 strongswan-pki-dbgsym_5.9.8-5+deb12u4_s390x.deb
 97dcb9128f0c65ca9d96126951f6b5e65fe2588e 140324 strongswan-pki_5.9.8-5+deb12u4_s390x.deb
 774bff72b36e6e4847709a06709d0ef732a5e04b 284900 strongswan-starter-dbgsym_5.9.8-5+deb12u4_s390x.deb
 5ae2020c2ad788ffc595f373439e0140558a1952 206892 strongswan-starter_5.9.8-5+deb12u4_s390x.deb
 9970cd122c2bde7bd9d3da55a13815a40d5b5fcd 333568 strongswan-swanctl-dbgsym_5.9.8-5+deb12u4_s390x.deb
 40f8a3b87d24580e1c96f16bc459e843e2284bc7 172584 strongswan-swanctl_5.9.8-5+deb12u4_s390x.deb
 3cfd9bf4cde5d0673c9c3a6682c8555a007e2acd 18023 strongswan_5.9.8-5+deb12u4_s390x-buildd.buildinfo
Checksums-Sha256:
 fe2c6c3c5b12597e8b89e6c627761243d5b0bf0147e6704c10b5cd399704dc0b 77460 charon-cmd-dbgsym_5.9.8-5+deb12u4_s390x.deb
 bc3ecd98fffa000b02608296d1a68dea2e6b372a975d5ea00496f526250c294c 87792 charon-cmd_5.9.8-5+deb12u4_s390x.deb
 02751f67d6a3b8906069ea465fbfa3c1c7f5fbe8905a25684e8c2c0d65bd1195 52220 charon-systemd-dbgsym_5.9.8-5+deb12u4_s390x.deb
 169efe002dde89830fd3c5e0816d2814059494fa9918ca5191130c63f2c6e545 84644 charon-systemd_5.9.8-5+deb12u4_s390x.deb
 40171f2f84671c7d355e981c43740abb7c0ddf5cd9d8ac22d6ad430fdc97d28d 104212 libcharon-extauth-plugins-dbgsym_5.9.8-5+deb12u4_s390x.deb
 869c70d9b38dbeae767045e1be7ffe52a81912d16009e96e9eb5f6aaaded9ee0 88992 libcharon-extauth-plugins_5.9.8-5+deb12u4_s390x.deb
 7ef284a8e3c88c7ac6ca0188fbbf724958734f407fbf6f8c34bc6d1d6455a975 1462604 libcharon-extra-plugins-dbgsym_5.9.8-5+deb12u4_s390x.deb
 25514504ddd8509776382cfb4d9bc40669d84ca2f8a9c9f074a4f261d9bab3fa 260148 libcharon-extra-plugins_5.9.8-5+deb12u4_s390x.deb
 04123bd42a41d7166033e862d9c2d657751454a9fceecfeeb0fc862dd91a3f5a 1434688 libstrongswan-dbgsym_5.9.8-5+deb12u4_s390x.deb
 5c0464824553b97ecd842cce502df60a5ba65ff5d19c19109130e794e67bb674 525720 libstrongswan-extra-plugins-dbgsym_5.9.8-5+deb12u4_s390x.deb
 bcfd01aef82844c5a889f714c800afc68b2e3e4438bbcf096f4e3a3dcfbc0cb2 260652 libstrongswan-extra-plugins_5.9.8-5+deb12u4_s390x.deb
 2fdc41d598380ab01da7d9d6e5d2ab73547d18cca092ed350a5210ab71898788 256736 libstrongswan-standard-plugins-dbgsym_5.9.8-5+deb12u4_s390x.deb
 0a67ca4a5e16c349637e537acd6fcb2bd40c7f4a7e50e83b43a9d426ad8bad0c 122736 libstrongswan-standard-plugins_5.9.8-5+deb12u4_s390x.deb
 35798a32325267636c61297e3d52ce049a02b10defaddf1c3e71d37eb70450cb 408296 libstrongswan_5.9.8-5+deb12u4_s390x.deb
 cdc51cb4aef562e74de58a415850f88b47d1f6250fcbff89fc099f4c41004952 52436 strongswan-charon-dbgsym_5.9.8-5+deb12u4_s390x.deb
 5a88d7f95565bd30f8a6ded8426f8fd7a41408416cfe1f4968186fe54a22199c 88972 strongswan-charon_5.9.8-5+deb12u4_s390x.deb
 235503407760e3ee28e2222aaeb3571cc02105461c4437cc70ba1373bc62da28 1023936 strongswan-libcharon-dbgsym_5.9.8-5+deb12u4_s390x.deb
 f319d2792fcd5b0bdf7559a78688f17bc29f7d1a720ac70e33615dedd4c7e776 297864 strongswan-libcharon_5.9.8-5+deb12u4_s390x.deb
 cf31d84e3c585882c10ff56a20a108c16cd0a635a4cec6e3f3f25688fc02d5da 99940 strongswan-nm-dbgsym_5.9.8-5+deb12u4_s390x.deb
 1fcb74f9d3f422b99949ad99d2106b73cd07412191761ac19b0f4149580da04b 90648 strongswan-nm_5.9.8-5+deb12u4_s390x.deb
 b3ca2a557853b8992c3975b9f9912ba762c69561e6da40cb911e014ad2628832 122508 strongswan-pki-dbgsym_5.9.8-5+deb12u4_s390x.deb
 c38fe753aadda0d934a80508a4e9becfc706c77fbabe0c0550c77011188a8b64 140324 strongswan-pki_5.9.8-5+deb12u4_s390x.deb
 246483ebe23ca24aa909c0c8dcd6b72b55cb4a9fe247e43de8d8bc102dc6cb74 284900 strongswan-starter-dbgsym_5.9.8-5+deb12u4_s390x.deb
 058121992b35f6ab4cb77e997b24302d9db52b09418a84e1d284a5cda45d7c12 206892 strongswan-starter_5.9.8-5+deb12u4_s390x.deb
 ea6faf236c3ca1e4715fdc5ef58bc5baf136b6964412aa29fd87696646f5cdd0 333568 strongswan-swanctl-dbgsym_5.9.8-5+deb12u4_s390x.deb
 b6d0f6b0d392e4df2e8fb26c9960a5f798709a596cdc34ecb8b2c68c811b34e6 172584 strongswan-swanctl_5.9.8-5+deb12u4_s390x.deb
 ae7d543de0598d53b691409dcdc79a6aad239909360c6911190c9e47e7d8b398 18023 strongswan_5.9.8-5+deb12u4_s390x-buildd.buildinfo
Files:
 e03936a781f3086f4feb62ba93c58955 77460 debug optional charon-cmd-dbgsym_5.9.8-5+deb12u4_s390x.deb
 bc1087d5e156b1ff8f861f24b5a4500a 87792 net optional charon-cmd_5.9.8-5+deb12u4_s390x.deb
 55cd0533b8b132705932349b02d8e3b6 52220 debug optional charon-systemd-dbgsym_5.9.8-5+deb12u4_s390x.deb
 4eb14c8e00ee98c35f9b6c2cb8f5dc9b 84644 net optional charon-systemd_5.9.8-5+deb12u4_s390x.deb
 cb955057f57adabdfe09987aefe313b9 104212 debug optional libcharon-extauth-plugins-dbgsym_5.9.8-5+deb12u4_s390x.deb
 992f55be76dd0d3d8a553c0eb0e4d371 88992 net optional libcharon-extauth-plugins_5.9.8-5+deb12u4_s390x.deb
 8ed64f4dc7bebede0cef58da75a146f5 1462604 debug optional libcharon-extra-plugins-dbgsym_5.9.8-5+deb12u4_s390x.deb
 8287bbc293f084978dad4ddc363de3c4 260148 net optional libcharon-extra-plugins_5.9.8-5+deb12u4_s390x.deb
 dc08ef0af75a01f02069d3bcc13299d2 1434688 debug optional libstrongswan-dbgsym_5.9.8-5+deb12u4_s390x.deb
 7a515e8ace902583035ca2a1ebb9881e 525720 debug optional libstrongswan-extra-plugins-dbgsym_5.9.8-5+deb12u4_s390x.deb
 fecbd988a7292e6f0c744c069d46ec08 260652 net optional libstrongswan-extra-plugins_5.9.8-5+deb12u4_s390x.deb
 4073f95f51bccb5e8366321a8144f3d8 256736 debug optional libstrongswan-standard-plugins-dbgsym_5.9.8-5+deb12u4_s390x.deb
 32ce141c4b9a44fd38f219ce9c271c93 122736 net optional libstrongswan-standard-plugins_5.9.8-5+deb12u4_s390x.deb
 fbbb76a6b497e3bb62d4879b76107e44 408296 net optional libstrongswan_5.9.8-5+deb12u4_s390x.deb
 eafde2cbecf723d6950d1b3c343c2864 52436 debug optional strongswan-charon-dbgsym_5.9.8-5+deb12u4_s390x.deb
 1aa280fab98bb26c08acaa3a147f5a54 88972 net optional strongswan-charon_5.9.8-5+deb12u4_s390x.deb
 e6b565b0365e1f33bb0011d10a77f6db 1023936 debug optional strongswan-libcharon-dbgsym_5.9.8-5+deb12u4_s390x.deb
 541a8b5da29c5e68226a93c653ea9957 297864 net optional strongswan-libcharon_5.9.8-5+deb12u4_s390x.deb
 4eed9f36091f600613e97c5b24721c0b 99940 debug optional strongswan-nm-dbgsym_5.9.8-5+deb12u4_s390x.deb
 76b11c86607659d6d978bad4fd4f66ea 90648 net optional strongswan-nm_5.9.8-5+deb12u4_s390x.deb
 f507fe644429d6054e84cb6ba6a2d190 122508 debug optional strongswan-pki-dbgsym_5.9.8-5+deb12u4_s390x.deb
 30f96f316f87ad09549bcefbed044cc4 140324 net optional strongswan-pki_5.9.8-5+deb12u4_s390x.deb
 7d06b1183a17ca82f6faaf32fe236490 284900 debug optional strongswan-starter-dbgsym_5.9.8-5+deb12u4_s390x.deb
 af7c5ca5286434e4ff770466cccedb1f 206892 net optional strongswan-starter_5.9.8-5+deb12u4_s390x.deb
 151b46272e001a6b5f133d234d038d58 333568 debug optional strongswan-swanctl-dbgsym_5.9.8-5+deb12u4_s390x.deb
 85b3238384f1eb6ea700c7bd2b57bc3d 172584 net optional strongswan-swanctl_5.9.8-5+deb12u4_s390x.deb
 fda79285f43443ca2cbb65d95bc285c6 18023 net optional strongswan_5.9.8-5+deb12u4_s390x-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=Cnm8
-----END PGP SIGNATURE-----