-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 01 Sep 2026 13:29:28 +0200 Source: strongswan Binary: charon-cmd charon-cmd-dbgsym charon-systemd charon-systemd-dbgsym libcharon-extauth-plugins libcharon-extauth-plugins-dbgsym libcharon-extra-plugins libcharon-extra-plugins-dbgsym libstrongswan libstrongswan-dbgsym libstrongswan-extra-plugins libstrongswan-extra-plugins-dbgsym libstrongswan-standard-plugins libstrongswan-standard-plugins-dbgsym strongswan-charon strongswan-charon-dbgsym strongswan-libcharon strongswan-libcharon-dbgsym strongswan-nm strongswan-nm-dbgsym strongswan-pki strongswan-pki-dbgsym strongswan-starter strongswan-starter-dbgsym strongswan-swanctl strongswan-swanctl-dbgsym Architecture: armhf Version: 6.0.1-6+deb13u7 Distribution: trixie-security Urgency: medium Maintainer: armhf Build Daemon (arm-ubc-04) Changed-By: Yves-Alexis Perez Description: charon-cmd - standalone IPsec client charon-systemd - strongSwan IPsec client, systemd support libcharon-extauth-plugins - strongSwan charon library (extended authentication plugins) libcharon-extra-plugins - strongSwan charon library (extra plugins) libstrongswan - strongSwan utility and crypto library libstrongswan-extra-plugins - strongSwan utility and crypto library (extra plugins) libstrongswan-standard-plugins - strongSwan utility and crypto library (standard plugins) strongswan-charon - strongSwan Internet Key Exchange daemon strongswan-libcharon - strongSwan charon library strongswan-nm - strongSwan plugin to interact with NetworkManager strongswan-pki - strongSwan IPsec client, pki command strongswan-starter - strongSwan daemon starter and configuration file parser strongswan-swanctl - strongSwan IPsec client, swanctl command Changes: strongswan (6.0.1-6+deb13u7) trixie-security; urgency=medium . * d/patches: add fix for undefined memory access when verifying PKCS#7 containers (CVE-2026-78123) * d/patches: add patch to fix memory leaks after enumerating certificates in PKCS#7 containers (CVE-2026-78124) * d/patches: fix NULL-pointer dereference in EAP-AKA (CVE-2026-78126) * d/patches: avoid memory leak in IKE message logging (CVE-2026-78127) * d/patches: fix potential DoS by validating PKCS#5 parsed parameters (CVE-2026-78129) * d/patches: fix NULL-pointer dereference in x509 code (CVE-2026-78130) * d/patches: fix memory leak when parsing x509 attribute certificates (CVE-2026-78131) * d/patches: fix infinite loop when parsing x509 attribute certificates (CVE-2026-78132) * d/patches: fix use-after-free in IKEv2 rekeying (CVE-2026-78133) * d/patches: fix several issues with binding identities to the IKE SA (CVE-2026-78134) * d/patches: properly reject CREATE_CHILD_SA requests on unestablished IKE_SA (CVE-2026-78135) Checksums-Sha1: 5f3b02ec45a97b8dc19196da1762971c1cce408b 85084 charon-cmd-dbgsym_6.0.1-6+deb13u7_armhf.deb 9e63c2f4d7311c628da2b6b46a387d48583af3be 98240 charon-cmd_6.0.1-6+deb13u7_armhf.deb de00ef068f334a455c27646eef0268827a2f95d0 53636 charon-systemd-dbgsym_6.0.1-6+deb13u7_armhf.deb 66b5267597848f11e7801e0822bae4a6451d51dc 95424 charon-systemd_6.0.1-6+deb13u7_armhf.deb b716c403d3ffb39b2b76098478231ac992ae3679 107352 libcharon-extauth-plugins-dbgsym_6.0.1-6+deb13u7_armhf.deb 31adbe77592fef3c1541016dba7a837971f250be 99580 libcharon-extauth-plugins_6.0.1-6+deb13u7_armhf.deb 9c8725bf22246b115f7da4fe23308689335480e7 1527784 libcharon-extra-plugins-dbgsym_6.0.1-6+deb13u7_armhf.deb 9a511b708d3e49a092b4cd7773eff7dd58d8ccda 267340 libcharon-extra-plugins_6.0.1-6+deb13u7_armhf.deb 1391e2fc0029131c753d54be1184a177b9fe113f 1401176 libstrongswan-dbgsym_6.0.1-6+deb13u7_armhf.deb 00d03698319b2760cd2a48296805c8472218b660 825836 libstrongswan-extra-plugins-dbgsym_6.0.1-6+deb13u7_armhf.deb 5bc8648e39c7ca089b989bf1fad00ffeb95b2789 341988 libstrongswan-extra-plugins_6.0.1-6+deb13u7_armhf.deb 5544f1d2ac88361fb5a1642e3b7b55f9691ab32c 144772 libstrongswan-standard-plugins-dbgsym_6.0.1-6+deb13u7_armhf.deb 36839b1fdb9f736c41cfd6917d13edee483e38e1 101648 libstrongswan-standard-plugins_6.0.1-6+deb13u7_armhf.deb f3ba30c6970412211ae30eaedd12a88db0deaf95 395404 libstrongswan_6.0.1-6+deb13u7_armhf.deb b5dec05b52e57bb5fa308f3ac8f6a45bc32a3fe7 53940 strongswan-charon-dbgsym_6.0.1-6+deb13u7_armhf.deb 54e889dbe93f5e3352a9f831363af22e4bab48fb 100112 strongswan-charon_6.0.1-6+deb13u7_armhf.deb 7541d6335e00d92134ce602791a99d92018cc5f8 1110628 strongswan-libcharon-dbgsym_6.0.1-6+deb13u7_armhf.deb d6df65dbfcf4b99e9251f9944de7002b01167122 304836 strongswan-libcharon_6.0.1-6+deb13u7_armhf.deb 989ecd0707e262309560d04f0b89e0a0d3e8c5dd 127336 strongswan-nm-dbgsym_6.0.1-6+deb13u7_armhf.deb 133d6d7a4c9b816b1a8de7d480256cbc56a0452f 102904 strongswan-nm_6.0.1-6+deb13u7_armhf.deb af06fd47e14011e610a0e8258baaea163506cccf 147560 strongswan-pki-dbgsym_6.0.1-6+deb13u7_armhf.deb a99935f5f2385cb2a9b698ad9551974e7a7b539c 161232 strongswan-pki_6.0.1-6+deb13u7_armhf.deb 6bf3726c72672b21f6852fe2817efeec41561c74 302296 strongswan-starter-dbgsym_6.0.1-6+deb13u7_armhf.deb 3a5a4600ad3d912bc3e3484f16d2b247cdaa6f50 218136 strongswan-starter_6.0.1-6+deb13u7_armhf.deb 45ae5999530aaadbeba7a9d0c8ce00c486d91755 350704 strongswan-swanctl-dbgsym_6.0.1-6+deb13u7_armhf.deb d7cbfa047898b6e410024d4e4ce51879df9cdc36 187060 strongswan-swanctl_6.0.1-6+deb13u7_armhf.deb 7648cf1f69a2a5a9381b721006d205fdea540d3e 19045 strongswan_6.0.1-6+deb13u7_armhf-buildd.buildinfo Checksums-Sha256: 99835230a459441a40bdd4a64906ae823a3e5facadff5cd8e463c805c4d04a64 85084 charon-cmd-dbgsym_6.0.1-6+deb13u7_armhf.deb 1ed38b7de5652c08588f0479c63a32ffb91d01e2a95b0ee3f201412769fbf775 98240 charon-cmd_6.0.1-6+deb13u7_armhf.deb 426bd91c87be8aab2fb1f6119c17b4e409ac51d560bd7a4d60bc5ba8f394e868 53636 charon-systemd-dbgsym_6.0.1-6+deb13u7_armhf.deb 5df7b5b2368b40ccf5b95db719d1079c953d6e33a313c28b931cdd69503b6431 95424 charon-systemd_6.0.1-6+deb13u7_armhf.deb 79f4b474d2940506640cbbeb74d0c0525bf611a579a9cf10047c07df1a636dce 107352 libcharon-extauth-plugins-dbgsym_6.0.1-6+deb13u7_armhf.deb cb062d3287f117571c520d1b1c7908ac7eb000f2e6097b51981e36bc191f0df9 99580 libcharon-extauth-plugins_6.0.1-6+deb13u7_armhf.deb 3165a8ab89ff420d8bfc797af85056110d0474a6ab5692d2b6d73d6a338b9194 1527784 libcharon-extra-plugins-dbgsym_6.0.1-6+deb13u7_armhf.deb 8617eb707f0dbbdc16154a26ebd6f9616ba8638463bce02cef9b915e30e6aaf0 267340 libcharon-extra-plugins_6.0.1-6+deb13u7_armhf.deb d8099bed19c12484e6f366f1e2f889c4327623b835a4ba85b8a32f124fabae19 1401176 libstrongswan-dbgsym_6.0.1-6+deb13u7_armhf.deb 27bd02e02dba3e2e9c6b67824c82f56dca1f0867657b122a932d623296e2cb84 825836 libstrongswan-extra-plugins-dbgsym_6.0.1-6+deb13u7_armhf.deb a818f4b1555267e3c30c063f8cd63332657d1eb1982633970875accf37486444 341988 libstrongswan-extra-plugins_6.0.1-6+deb13u7_armhf.deb e8d7b0817d731100d7b9a87cf85500cbff60ce621b5d10ff1fe957cb2d03dde6 144772 libstrongswan-standard-plugins-dbgsym_6.0.1-6+deb13u7_armhf.deb ed97b7317ffe1cce596fe453d4721b85ba59833fee1d921a12e893ad5815a04f 101648 libstrongswan-standard-plugins_6.0.1-6+deb13u7_armhf.deb dec0260b0773c6fbcc7a8a2cec44e9451444ef867360c71bb47de2ddba398c2c 395404 libstrongswan_6.0.1-6+deb13u7_armhf.deb 760a78bd150624302e274090ea4c767c0dc763bbbe97a10c776a2ae84e9dd667 53940 strongswan-charon-dbgsym_6.0.1-6+deb13u7_armhf.deb ffa67a6fd8b9cc6726e7640a4f3d8d64141f6fd5a386a2bf9e2677d7138a15e4 100112 strongswan-charon_6.0.1-6+deb13u7_armhf.deb 859890375aa984b3324b514b6428845d09df1c7c64b410a8a3e9ca93088205dc 1110628 strongswan-libcharon-dbgsym_6.0.1-6+deb13u7_armhf.deb 59502fc9fbe5b56086aba533fc82b121a8fda4553e28fb3c4b20e6c937444895 304836 strongswan-libcharon_6.0.1-6+deb13u7_armhf.deb 9f8954fb255144239dc4012ed9a33aec651e17d09212fa686a194bc1b49fb2c9 127336 strongswan-nm-dbgsym_6.0.1-6+deb13u7_armhf.deb 75393cede9d39523f83668ef82e87926d15e9a1e0f557d6d3daabe8005b9568c 102904 strongswan-nm_6.0.1-6+deb13u7_armhf.deb 734076b874bef32d74d0ff87041323086b33814a53e8cfd1babf9ca45b531f8f 147560 strongswan-pki-dbgsym_6.0.1-6+deb13u7_armhf.deb 5a48dc76177c82f22396ca4a7f8f3ed98443c2180862ea10f69e5f6359dfd5a5 161232 strongswan-pki_6.0.1-6+deb13u7_armhf.deb 5ad2f09030c70651cf3e653d9d3e6d35e8278b68bc0d82b47beb87c2b9f2b797 302296 strongswan-starter-dbgsym_6.0.1-6+deb13u7_armhf.deb 207e5204014f58efd5e86de45a45c8c1a8810b105e241c6e0a787890136783d1 218136 strongswan-starter_6.0.1-6+deb13u7_armhf.deb a01dfaa411363722a65842098c57427e6cbf67a96846187fb6baa5e394d33357 350704 strongswan-swanctl-dbgsym_6.0.1-6+deb13u7_armhf.deb 3c14e8d4b88300b23f1ad147d393ce56f6ccca6abd7dc53c00c9b17c71d17a0a 187060 strongswan-swanctl_6.0.1-6+deb13u7_armhf.deb 1904de4fa499b0ebf2caeea2b2d941b943a2c207c4d09f8514bb9476965d2ff1 19045 strongswan_6.0.1-6+deb13u7_armhf-buildd.buildinfo Files: 7fef46c5a4ac18c8e3b9a4f0ac490700 85084 debug optional charon-cmd-dbgsym_6.0.1-6+deb13u7_armhf.deb c952bd51ab3d0f73a3700ab4e0828190 98240 net optional charon-cmd_6.0.1-6+deb13u7_armhf.deb 7d07910e16be065923c89e84975b202f 53636 debug optional charon-systemd-dbgsym_6.0.1-6+deb13u7_armhf.deb 50bce911527df0b62df50eec018505ca 95424 net optional charon-systemd_6.0.1-6+deb13u7_armhf.deb 6d4128bdf3a567edb52cdac1f70ae71c 107352 debug optional libcharon-extauth-plugins-dbgsym_6.0.1-6+deb13u7_armhf.deb 56a47525202b89ec8d5a3edf5b7bbe33 99580 net optional libcharon-extauth-plugins_6.0.1-6+deb13u7_armhf.deb db08cc3a90c794bddd10a00e23c6e1d6 1527784 debug optional libcharon-extra-plugins-dbgsym_6.0.1-6+deb13u7_armhf.deb 2f29f34a2d1d4327fe0ea2367dd561af 267340 net optional libcharon-extra-plugins_6.0.1-6+deb13u7_armhf.deb 7c909a9827ed5357fb52c52f21199aba 1401176 debug optional libstrongswan-dbgsym_6.0.1-6+deb13u7_armhf.deb 8346b8151e98eb4c4607fb4bf1bd908e 825836 debug optional libstrongswan-extra-plugins-dbgsym_6.0.1-6+deb13u7_armhf.deb dc7123b0310c6b99666511c9796e1f70 341988 net optional libstrongswan-extra-plugins_6.0.1-6+deb13u7_armhf.deb f2296662beffcb3340d0369de11f4010 144772 debug optional libstrongswan-standard-plugins-dbgsym_6.0.1-6+deb13u7_armhf.deb aa4c54634ba39d56fc33f93dae6f8d00 101648 net optional libstrongswan-standard-plugins_6.0.1-6+deb13u7_armhf.deb 110c249671f0cc6549ed54ab4811a3c2 395404 net optional libstrongswan_6.0.1-6+deb13u7_armhf.deb 0ec370536b8b5317a6346a6fdd3488c2 53940 debug optional strongswan-charon-dbgsym_6.0.1-6+deb13u7_armhf.deb e9b4b2a41bd12307a92db1c318f5e62f 100112 net optional strongswan-charon_6.0.1-6+deb13u7_armhf.deb 2e4ae91a5030a40eeea89d0d9f10a1a6 1110628 debug optional strongswan-libcharon-dbgsym_6.0.1-6+deb13u7_armhf.deb ba8a5fe5445f72647235b47aa86e2055 304836 net optional strongswan-libcharon_6.0.1-6+deb13u7_armhf.deb 6d5accea31475a8bb02487002e21693e 127336 debug optional strongswan-nm-dbgsym_6.0.1-6+deb13u7_armhf.deb 97ebb8a927a88b62f17af81e889ee5da 102904 net optional strongswan-nm_6.0.1-6+deb13u7_armhf.deb b565bcc5c839f7d1b87d9c7549f5bd88 147560 debug optional strongswan-pki-dbgsym_6.0.1-6+deb13u7_armhf.deb 65b0fa988b0c3e4c91bd046fe49603d9 161232 net optional strongswan-pki_6.0.1-6+deb13u7_armhf.deb 2ad030e981eaab35247638309ec4d805 302296 debug optional strongswan-starter-dbgsym_6.0.1-6+deb13u7_armhf.deb b1cc54ba0597ce17850ada4fde10846a 218136 net optional strongswan-starter_6.0.1-6+deb13u7_armhf.deb 18dd67b2ca5e9f4f91b94d2a2b9e4144 350704 debug optional strongswan-swanctl-dbgsym_6.0.1-6+deb13u7_armhf.deb 3ae3a1a1ca25435ed163bad8482d70ce 187060 net optional strongswan-swanctl_6.0.1-6+deb13u7_armhf.deb 042ae2cf3127e564fd0debfd39a4d7e5 19045 net optional strongswan_6.0.1-6+deb13u7_armhf-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIyBAEBCgAdFiEECx5fXZYVNP9tMtwlK1PZBedPspoFAmqWwQgACgkQK1PZBedP sprx8g/3etnJyX/1w9gaY+06hrJu2wm5HCfCYcpAH1/WXM1chIW+2Y41Tc4LW/2i 4iEjyKk50GYZdeGAW8VDBV9GvSHKxsXXuYRRGCDlJ/jZB2opaJ56pV609NCHXqGR g33tBXqd+BH2WP5CSbvht783TZyiSak+J/ytCT9uDFbVT5Hy7aAr2RslFQFtEUNP owIcI93XKqWi430qP9WZn74hivRc7Bw6RAj/MrzmD9Nqd+pl574tbW62Ak2AnP+V iB9tYC5DbitEXuCqL2N3lY0RaAgVyooz8TnNLFaf4sFtnAWJUkdgtAuOyp+KFHpu Vob7gPHD4To42rQi3/sVRo4xqK1+DtJEnu8A+3rpM+NrhQLOdbG3p2BvtKXr19KC PiohJm7FPF4n5U3tSLJWwKvxLw+4Vf6RO3TbLMfQSnXgo8TuuDhm2cFTlHYvt8tX WKqXDYIOSc8gf1pEFKuyhyLEWE8JH5wPLWKfrLsuMmLdbPju8Aylxlv9b5isw+XD X3qyyv3t0aGGGUwSUUVoDUMlqJUOwpN3xoSqoicGq99ipLm5BCLezee87HnCmzME x/YUjXGXY4/FxNYBf21rvhaQbH8ALJOmE0U6FDEGRkYK0u4b7aJDg3Vv7U9xtObK d1cqcH7XRI+Q9FauKVuXReYEjbxGKFjrzP0D5k/xsLmoJ6zVUw== =4Pyx -----END PGP SIGNATURE-----