-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 01 Sep 2026 13:29:28 +0200 Source: strongswan Binary: charon-cmd charon-cmd-dbgsym charon-systemd charon-systemd-dbgsym libcharon-extauth-plugins libcharon-extauth-plugins-dbgsym libcharon-extra-plugins libcharon-extra-plugins-dbgsym libstrongswan libstrongswan-dbgsym libstrongswan-extra-plugins libstrongswan-extra-plugins-dbgsym libstrongswan-standard-plugins libstrongswan-standard-plugins-dbgsym strongswan-charon strongswan-charon-dbgsym strongswan-libcharon strongswan-libcharon-dbgsym strongswan-nm strongswan-nm-dbgsym strongswan-pki strongswan-pki-dbgsym strongswan-starter strongswan-starter-dbgsym strongswan-swanctl strongswan-swanctl-dbgsym Architecture: amd64 Version: 6.0.1-6+deb13u7 Distribution: trixie-security Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) Changed-By: Yves-Alexis Perez Description: charon-cmd - standalone IPsec client charon-systemd - strongSwan IPsec client, systemd support libcharon-extauth-plugins - strongSwan charon library (extended authentication plugins) libcharon-extra-plugins - strongSwan charon library (extra plugins) libstrongswan - strongSwan utility and crypto library libstrongswan-extra-plugins - strongSwan utility and crypto library (extra plugins) libstrongswan-standard-plugins - strongSwan utility and crypto library (standard plugins) strongswan-charon - strongSwan Internet Key Exchange daemon strongswan-libcharon - strongSwan charon library strongswan-nm - strongSwan plugin to interact with NetworkManager strongswan-pki - strongSwan IPsec client, pki command strongswan-starter - strongSwan daemon starter and configuration file parser strongswan-swanctl - strongSwan IPsec client, swanctl command Changes: strongswan (6.0.1-6+deb13u7) trixie-security; urgency=medium . * d/patches: add fix for undefined memory access when verifying PKCS#7 containers (CVE-2026-78123) * d/patches: add patch to fix memory leaks after enumerating certificates in PKCS#7 containers (CVE-2026-78124) * d/patches: fix NULL-pointer dereference in EAP-AKA (CVE-2026-78126) * d/patches: avoid memory leak in IKE message logging (CVE-2026-78127) * d/patches: fix potential DoS by validating PKCS#5 parsed parameters (CVE-2026-78129) * d/patches: fix NULL-pointer dereference in x509 code (CVE-2026-78130) * d/patches: fix memory leak when parsing x509 attribute certificates (CVE-2026-78131) * d/patches: fix infinite loop when parsing x509 attribute certificates (CVE-2026-78132) * d/patches: fix use-after-free in IKEv2 rekeying (CVE-2026-78133) * d/patches: fix several issues with binding identities to the IKE SA (CVE-2026-78134) * d/patches: properly reject CREATE_CHILD_SA requests on unestablished IKE_SA (CVE-2026-78135) Checksums-Sha1: 9eea0a458dfcdbe48c374b6aaa9c4cd3bacd3d5b 79316 charon-cmd-dbgsym_6.0.1-6+deb13u7_amd64.deb 8cf301611fc40c6d6530f11140b7ec4c3aa12b62 99436 charon-cmd_6.0.1-6+deb13u7_amd64.deb e6ef688403b558aee4009b4c574b3e4b0b84e584 53960 charon-systemd-dbgsym_6.0.1-6+deb13u7_amd64.deb ccbfe36cfddbc11ac3cf442973d1af3059776dd1 95896 charon-systemd_6.0.1-6+deb13u7_amd64.deb 119eb4a3d460e90e00c4c89a47aff498d0bdb53e 120728 libcharon-extauth-plugins-dbgsym_6.0.1-6+deb13u7_amd64.deb c7f40d6ab4f5b6bf4bc59284680aa662013fb4df 100384 libcharon-extauth-plugins_6.0.1-6+deb13u7_amd64.deb 66ecabf05f92c619befdd0727ebb782cfb3ec63f 1548392 libcharon-extra-plugins-dbgsym_6.0.1-6+deb13u7_amd64.deb 6bb855413198a0f66544c61877c61b89679b98ea 291692 libcharon-extra-plugins_6.0.1-6+deb13u7_amd64.deb 8e68037909305bbf17b6eaae8f0dbb30843a47dc 1398656 libstrongswan-dbgsym_6.0.1-6+deb13u7_amd64.deb 7d2c3711f66b50d1dab0e8a0d62d7bbbc82f6293 885572 libstrongswan-extra-plugins-dbgsym_6.0.1-6+deb13u7_amd64.deb ee81fe6f3f15bc9ff9914b52b0c21c186337f8ea 365436 libstrongswan-extra-plugins_6.0.1-6+deb13u7_amd64.deb 8ad1bc2e9646bf18411e99da640f047ee30bf362 281544 libstrongswan-standard-plugins-dbgsym_6.0.1-6+deb13u7_amd64.deb 3c8889c28429293a1c4566b9f7175a21d82a9a7e 117452 libstrongswan-standard-plugins_6.0.1-6+deb13u7_amd64.deb becc34ccba5cc4d704b1b3bf0437eaa5e0cd7722 445624 libstrongswan_6.0.1-6+deb13u7_amd64.deb 764947bebd04d1747ef5383f40d245f857fb0f0f 54360 strongswan-charon-dbgsym_6.0.1-6+deb13u7_amd64.deb 71bed7b8818a4d4d8774ed64960f37a82068cc67 100456 strongswan-charon_6.0.1-6+deb13u7_amd64.deb a0a43cfe9388f08f0b838391b659d10cbdac84b4 1076776 strongswan-libcharon-dbgsym_6.0.1-6+deb13u7_amd64.deb 02d7a0299e9cd22c3964031a885506aca33e4660 341496 strongswan-libcharon_6.0.1-6+deb13u7_amd64.deb 4079352b62918e1b3d5974819d9458ae7804d1e4 104960 strongswan-nm-dbgsym_6.0.1-6+deb13u7_amd64.deb 1c7cbd10ffdbb77609914fdfaa796d2e250762e7 105108 strongswan-nm_6.0.1-6+deb13u7_amd64.deb f662109f3024a6a84fd797f4e5a40914563e8758 138400 strongswan-pki-dbgsym_6.0.1-6+deb13u7_amd64.deb 07283bbebdefcfc522f359bafb2d6d512a1ebeaa 165260 strongswan-pki_6.0.1-6+deb13u7_amd64.deb d36f0370629971aea31636d285fb1d1ba7cb5a03 299928 strongswan-starter-dbgsym_6.0.1-6+deb13u7_amd64.deb 85f6fa7edb87cd466859e29480b698cb002dc8e6 226468 strongswan-starter_6.0.1-6+deb13u7_amd64.deb f96c6d5abad49f6961e77e94653004ee8ffa9249 376596 strongswan-swanctl-dbgsym_6.0.1-6+deb13u7_amd64.deb 7b614160d098a20b7fb27e49fca1cd071d69becc 195880 strongswan-swanctl_6.0.1-6+deb13u7_amd64.deb dd26438bce10365a9605f58af825ac6108cbbd61 19182 strongswan_6.0.1-6+deb13u7_amd64-buildd.buildinfo Checksums-Sha256: f1953b7dc39715dc58b5d59250beb98ea7115489b4577e256851cf5d238a4ffa 79316 charon-cmd-dbgsym_6.0.1-6+deb13u7_amd64.deb 870d8fcc8c33fe4a32fe674c0e110d7d9bb761e25719c8c23ff4cd5780dad2a7 99436 charon-cmd_6.0.1-6+deb13u7_amd64.deb f1ad456c440a07b1b2094a22aebc3d60a472a54c3ebe64a000d139fda770599c 53960 charon-systemd-dbgsym_6.0.1-6+deb13u7_amd64.deb 7e28bbdaf158d00e3340da27ab292f156535d01008ae1c3a1a5140ebe6e6a284 95896 charon-systemd_6.0.1-6+deb13u7_amd64.deb 05992dc51d3bb1e3622f1eb5cfaf5280434242ed9abe276bb82b78be23f81b25 120728 libcharon-extauth-plugins-dbgsym_6.0.1-6+deb13u7_amd64.deb 48fdd9e4d7ac9cbd705a68449cfac0c28a79d5488e07d700bd6ffe6535ab4012 100384 libcharon-extauth-plugins_6.0.1-6+deb13u7_amd64.deb 6c695370a08ac94020d8869a3b28ee5acafc7445c08f9b5ac2d02dba6bea0d99 1548392 libcharon-extra-plugins-dbgsym_6.0.1-6+deb13u7_amd64.deb ab550dbe2a606b37dfa0dc3bc9b2779fb4515c5b5d4d52aaaba9830407024b95 291692 libcharon-extra-plugins_6.0.1-6+deb13u7_amd64.deb 74e431d6cb6f8088543f73f61154d56caac2b14e0bcba14a15f94fc93e0e80ee 1398656 libstrongswan-dbgsym_6.0.1-6+deb13u7_amd64.deb cad67d4a31c462da8a167a429d377223f2303c4b8f4210ef4ff0083082447678 885572 libstrongswan-extra-plugins-dbgsym_6.0.1-6+deb13u7_amd64.deb 20fc1200bc663e468854ba5b1c92675c3a4375967fab01152ff77ff1d0544e22 365436 libstrongswan-extra-plugins_6.0.1-6+deb13u7_amd64.deb af9668dd2212be9834164dcaa46efc66902d76433801e3ee6cfe91aa578b5f1c 281544 libstrongswan-standard-plugins-dbgsym_6.0.1-6+deb13u7_amd64.deb 3e7734276e9f548be33f7a651312964c2668f9b38bfee993fa0f7f3205123e05 117452 libstrongswan-standard-plugins_6.0.1-6+deb13u7_amd64.deb 647b6591db08aa37bc95b849717e82279260419a368cc6902ad6c769ef4d6e24 445624 libstrongswan_6.0.1-6+deb13u7_amd64.deb ff5396e4738a697130137448ecab7e8b29221632f86731709b0cf5a3833ee1f5 54360 strongswan-charon-dbgsym_6.0.1-6+deb13u7_amd64.deb 732e382c607023e782fe985298dc2b676619566b5c05c51cfc1a4fccaeab2c46 100456 strongswan-charon_6.0.1-6+deb13u7_amd64.deb 5e2a4ce6e35195474ff60787d08d250f3fdf053989d30059ba4f7e5b65452ad0 1076776 strongswan-libcharon-dbgsym_6.0.1-6+deb13u7_amd64.deb 6285c01d7288018610b2c2a88975a67a50b8de590705c687ea05db3fad9bbf18 341496 strongswan-libcharon_6.0.1-6+deb13u7_amd64.deb 38726e5ff31720c023205454a3170d604d85b13860cf5bb3a2c5859fa98beae8 104960 strongswan-nm-dbgsym_6.0.1-6+deb13u7_amd64.deb 3f4db619903298dce8e24822357892f7f320c1dcd9301a96d40872b4a365fd70 105108 strongswan-nm_6.0.1-6+deb13u7_amd64.deb d5b8b06d4dd501650b4a14035920ab7c618082e655e052fd2a3f819842da1808 138400 strongswan-pki-dbgsym_6.0.1-6+deb13u7_amd64.deb b4b827a0b0c873130be20914f35d46bdcaf420edf5693f8f25d456f7fede88e4 165260 strongswan-pki_6.0.1-6+deb13u7_amd64.deb 0392ccde671a7d0cf11dad24e5b23aab70c90a3d7c3a1060493aafba31afa994 299928 strongswan-starter-dbgsym_6.0.1-6+deb13u7_amd64.deb 48e56ab137c1a5197115c4195576cd0333725f594e96c65938a0bdf9d175cd3d 226468 strongswan-starter_6.0.1-6+deb13u7_amd64.deb 6abf71f23c0d4d2dac04fb57e8af4081d19a6bb5c518dd3f492ec3d50e580e7c 376596 strongswan-swanctl-dbgsym_6.0.1-6+deb13u7_amd64.deb 2d3c77dfe953d20a53b731afce72093cb8b1ffa28af9a6b953711d8d396f91f3 195880 strongswan-swanctl_6.0.1-6+deb13u7_amd64.deb c3adfef39bb02052b8ba2b0fff9207af77dd49e86d2ff5365ad325c89f32f5fb 19182 strongswan_6.0.1-6+deb13u7_amd64-buildd.buildinfo Files: 1c7b89c62aff720c25ebb24abf31578d 79316 debug optional charon-cmd-dbgsym_6.0.1-6+deb13u7_amd64.deb 8bb57e87c3b25e7f4d0fcc8fef02d8f7 99436 net optional charon-cmd_6.0.1-6+deb13u7_amd64.deb 068d9453473f5087e9a11536526af16b 53960 debug optional charon-systemd-dbgsym_6.0.1-6+deb13u7_amd64.deb 9bc1123cc78326d63cfcff517722cfa6 95896 net optional charon-systemd_6.0.1-6+deb13u7_amd64.deb b7b631bea036e1b0ab62e5a4ec4e0ecf 120728 debug optional libcharon-extauth-plugins-dbgsym_6.0.1-6+deb13u7_amd64.deb e832b58febbe42c027113aec23c0fd59 100384 net optional libcharon-extauth-plugins_6.0.1-6+deb13u7_amd64.deb 07f6f9f08856b48d04393c1bb635630c 1548392 debug optional libcharon-extra-plugins-dbgsym_6.0.1-6+deb13u7_amd64.deb fdd084b881b63e2a22767807acfccc99 291692 net optional libcharon-extra-plugins_6.0.1-6+deb13u7_amd64.deb bc8bba6bd2a0b155492bae9219227c49 1398656 debug optional libstrongswan-dbgsym_6.0.1-6+deb13u7_amd64.deb 9847c24fc6f10d622e022b9ceb833a7d 885572 debug optional libstrongswan-extra-plugins-dbgsym_6.0.1-6+deb13u7_amd64.deb e526fe22b6cbd83d57e084f935861d4b 365436 net optional libstrongswan-extra-plugins_6.0.1-6+deb13u7_amd64.deb 454ee8c97f02f46487f6ee7f7df4823c 281544 debug optional libstrongswan-standard-plugins-dbgsym_6.0.1-6+deb13u7_amd64.deb 6c9a96bb00d4cc37e7fa76b0ed5d7240 117452 net optional libstrongswan-standard-plugins_6.0.1-6+deb13u7_amd64.deb 345b0e08103e6d9decfc25059364a7e0 445624 net optional libstrongswan_6.0.1-6+deb13u7_amd64.deb c3d9a68778fd074596cffa127f1c92db 54360 debug optional strongswan-charon-dbgsym_6.0.1-6+deb13u7_amd64.deb 47eef420dbdad5907cd114ecd6e746b1 100456 net optional strongswan-charon_6.0.1-6+deb13u7_amd64.deb a689ac4b3fa6c2c425ab997c857bfa7d 1076776 debug optional strongswan-libcharon-dbgsym_6.0.1-6+deb13u7_amd64.deb 05e6a402d2a0b0e9a7d52a4fadd9069a 341496 net optional strongswan-libcharon_6.0.1-6+deb13u7_amd64.deb 30715b96c34242af167fdd6671abc787 104960 debug optional strongswan-nm-dbgsym_6.0.1-6+deb13u7_amd64.deb f8674527ce2c27d04dd2e137cba06a3e 105108 net optional strongswan-nm_6.0.1-6+deb13u7_amd64.deb bad4ce995c1202cc549a5c53928533c7 138400 debug optional strongswan-pki-dbgsym_6.0.1-6+deb13u7_amd64.deb a237f2e17c43fc54f311e04ff737740a 165260 net optional strongswan-pki_6.0.1-6+deb13u7_amd64.deb 346af99d8e2ef88952a8330adc7467aa 299928 debug optional strongswan-starter-dbgsym_6.0.1-6+deb13u7_amd64.deb 602d3312913f0352da660eaec3577dee 226468 net optional strongswan-starter_6.0.1-6+deb13u7_amd64.deb eeeb53eb94dc3723185bbbd6d1bc8067 376596 debug optional strongswan-swanctl-dbgsym_6.0.1-6+deb13u7_amd64.deb 99d95180f1c96002c5cb086a01dd710d 195880 net optional strongswan-swanctl_6.0.1-6+deb13u7_amd64.deb c3af31f4931d26f3ef47cffe29bac321 19182 net optional strongswan_6.0.1-6+deb13u7_amd64-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE+i/sCsF3puL4e7qIGNGWmfrqILEFAmqW24YACgkQGNGWmfrq ILF2HxAAivI3pcSljlb2eDnhxMFBjO1WJ2ec/2qeWE6IuE2PViyQouFK6ONMyJHi HBGnpHymlXqqKWtLJgYK9dfKqDP/RtPpJNO4K6qeQ5Ao8XDNNSHhpXH5AQRC/6Zj AeG3i/5vbsOw9GVJxE8zgPIUuP1VX5wQWxqFPEpR7fqjzvhU7A1mlAlLDKJ6CZgU wAnPXhBWERYeBV6w3LRy7w7Rfg7qVAmzGMlUY+PD3Fu5PDG8dwdBZ4vzctAw7VDv YmzM8b9sbxhZA9EBKwQhYSDGQoTjgbOR+AWDeZ8NRXjieNUpcPAOJgKZHT1oHy4W KDMM69dOzi8oxwpkQ/5sXlGzyRVOzX9WrzQuTVrtLF6v6a8gPfD4p32TG6sbjyy9 s8iYyYcuJ8a5mEWccyTwcDPOufRaDn0iu2pTznZ80/Io6JWW1Brll84dGXKZ/0GA nirLrYBFkGgvUz6gG81X4thP3VD5JFdoVRAYTRPuf5fUkf8iJ3RLKPXjPe6T1zFc F3fujm30W89yjjmsjBuMpFoR/a2FvK5O4JhRGxoteHskXM/fybJv7T97Ut3Uvckp 8aVN0qOomJbDRHtefpXjvM0NA6oztfz+7ARGl6GBygRuI2lyyahA3bjn15YyiqRJ m57fEtmM7IaSDDRC8bgUoVMr2GS/L3pqvx3iXs1T7PTYZHuRw6Q= =qXEl -----END PGP SIGNATURE-----