-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 01 Sep 2026 13:29:28 +0200 Source: strongswan Binary: charon-cmd charon-cmd-dbgsym charon-systemd charon-systemd-dbgsym libcharon-extauth-plugins libcharon-extauth-plugins-dbgsym libcharon-extra-plugins libcharon-extra-plugins-dbgsym libstrongswan libstrongswan-dbgsym libstrongswan-extra-plugins libstrongswan-extra-plugins-dbgsym libstrongswan-standard-plugins libstrongswan-standard-plugins-dbgsym strongswan-charon strongswan-charon-dbgsym strongswan-libcharon strongswan-libcharon-dbgsym strongswan-nm strongswan-nm-dbgsym strongswan-pki strongswan-pki-dbgsym strongswan-starter strongswan-starter-dbgsym strongswan-swanctl strongswan-swanctl-dbgsym Architecture: i386 Version: 6.0.1-6+deb13u7 Distribution: trixie-security Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) Changed-By: Yves-Alexis Perez Description: charon-cmd - standalone IPsec client charon-systemd - strongSwan IPsec client, systemd support libcharon-extauth-plugins - strongSwan charon library (extended authentication plugins) libcharon-extra-plugins - strongSwan charon library (extra plugins) libstrongswan - strongSwan utility and crypto library libstrongswan-extra-plugins - strongSwan utility and crypto library (extra plugins) libstrongswan-standard-plugins - strongSwan utility and crypto library (standard plugins) strongswan-charon - strongSwan Internet Key Exchange daemon strongswan-libcharon - strongSwan charon library strongswan-nm - strongSwan plugin to interact with NetworkManager strongswan-pki - strongSwan IPsec client, pki command strongswan-starter - strongSwan daemon starter and configuration file parser strongswan-swanctl - strongSwan IPsec client, swanctl command Changes: strongswan (6.0.1-6+deb13u7) trixie-security; urgency=medium . * d/patches: add fix for undefined memory access when verifying PKCS#7 containers (CVE-2026-78123) * d/patches: add patch to fix memory leaks after enumerating certificates in PKCS#7 containers (CVE-2026-78124) * d/patches: fix NULL-pointer dereference in EAP-AKA (CVE-2026-78126) * d/patches: avoid memory leak in IKE message logging (CVE-2026-78127) * d/patches: fix potential DoS by validating PKCS#5 parsed parameters (CVE-2026-78129) * d/patches: fix NULL-pointer dereference in x509 code (CVE-2026-78130) * d/patches: fix memory leak when parsing x509 attribute certificates (CVE-2026-78131) * d/patches: fix infinite loop when parsing x509 attribute certificates (CVE-2026-78132) * d/patches: fix use-after-free in IKEv2 rekeying (CVE-2026-78133) * d/patches: fix several issues with binding identities to the IKE SA (CVE-2026-78134) * d/patches: properly reject CREATE_CHILD_SA requests on unestablished IKE_SA (CVE-2026-78135) Checksums-Sha1: c0647517986ac92793d28ef8870bf19335c4838f 83216 charon-cmd-dbgsym_6.0.1-6+deb13u7_i386.deb 1665ebe6b5baf57d4674bca79e5e04de2b3972ce 99808 charon-cmd_6.0.1-6+deb13u7_i386.deb 6e75526526ce613b154bb22cb1d8fe923495c937 52424 charon-systemd-dbgsym_6.0.1-6+deb13u7_i386.deb 4411d98f29d8268fef1b41e50cf18b7e0707bd51 95984 charon-systemd_6.0.1-6+deb13u7_i386.deb a1db9b50d93f54ea2a07ea9e9d622b33472e7b4f 132856 libcharon-extauth-plugins-dbgsym_6.0.1-6+deb13u7_i386.deb 723d6cbe256f26e6fb6bda2ded6875dff12f1073 100976 libcharon-extauth-plugins_6.0.1-6+deb13u7_i386.deb e6cffe6a22f69b3ef2864b509f8fe25cccff1a48 1501032 libcharon-extra-plugins-dbgsym_6.0.1-6+deb13u7_i386.deb adf7560cbcdc9240774fd607fe6bc156b1b30fa2 309296 libcharon-extra-plugins_6.0.1-6+deb13u7_i386.deb 00920531ac1e8dd1e1ef5a22b8ee65402a23f126 1306540 libstrongswan-dbgsym_6.0.1-6+deb13u7_i386.deb cdd0647e6b35975c4e573f0d0efef6236a78d147 890892 libstrongswan-extra-plugins-dbgsym_6.0.1-6+deb13u7_i386.deb a4b17152337f4beb9dd953d7fc2f47d2a7b404f8 374832 libstrongswan-extra-plugins_6.0.1-6+deb13u7_i386.deb 2005dc5a1528c4721f334198f4538abb18bcce08 280136 libstrongswan-standard-plugins-dbgsym_6.0.1-6+deb13u7_i386.deb a284db4588b0fea0b101a9a38869223c08ba923d 118844 libstrongswan-standard-plugins_6.0.1-6+deb13u7_i386.deb 8c43f6d227c61c2389169e9f91f2797732b26c43 467372 libstrongswan_6.0.1-6+deb13u7_i386.deb adcbcbcc2cdc239a1bb6d29c57c659b8a00082c4 53124 strongswan-charon-dbgsym_6.0.1-6+deb13u7_i386.deb e4fbe93299e079bceacc7afb185833d8ea73aef3 100404 strongswan-charon_6.0.1-6+deb13u7_i386.deb 3c7fa06216464043033d99aca0d4418f3031d1b1 984996 strongswan-libcharon-dbgsym_6.0.1-6+deb13u7_i386.deb 6161a1e801233a939a3ce3916fcb10f852c80866 374416 strongswan-libcharon_6.0.1-6+deb13u7_i386.deb a3bcd97036528264e588b96a13014408e6d0247a 121860 strongswan-nm-dbgsym_6.0.1-6+deb13u7_i386.deb 66be95ba8495eca20463c0d6d0504fb5a38b01b1 106848 strongswan-nm_6.0.1-6+deb13u7_i386.deb 8a0a9b5383d5b642b7f6adf92c21e6d77cd3232a 131000 strongswan-pki-dbgsym_6.0.1-6+deb13u7_i386.deb f91a796d2818a6c2eda7678520e4c42a88bb93ee 167868 strongswan-pki_6.0.1-6+deb13u7_i386.deb 44d8d2746159525cab334c76923402560dde0b7c 289264 strongswan-starter-dbgsym_6.0.1-6+deb13u7_i386.deb d422f035dc36c2da71c7d447e864f300be8841a6 232068 strongswan-starter_6.0.1-6+deb13u7_i386.deb f03316139f363398a671cf26c232fec695169aed 323272 strongswan-swanctl-dbgsym_6.0.1-6+deb13u7_i386.deb 035b96c6fa589e55d919b16ac8f9ce0cdc2875c9 203864 strongswan-swanctl_6.0.1-6+deb13u7_i386.deb d7336bf80d8a2782bd0f75fef65f50d2f1bf0c5f 19008 strongswan_6.0.1-6+deb13u7_i386-buildd.buildinfo Checksums-Sha256: c82d489165de57e760ad2d368e5a0bfda2fc850bd3e15fd13f4bced593d1be40 83216 charon-cmd-dbgsym_6.0.1-6+deb13u7_i386.deb 439311dd3c270a1ed28ef0eced57a3ed6185765599259178112b4c3203c562c3 99808 charon-cmd_6.0.1-6+deb13u7_i386.deb b08b1bfe261e156b6aa5f04df79752dc23b070a49f0faa01535bcd3c6a82c1db 52424 charon-systemd-dbgsym_6.0.1-6+deb13u7_i386.deb ff392fe5d99e3a6772c5c6490dd77c856e88c7291048987a2ff88e298bebc646 95984 charon-systemd_6.0.1-6+deb13u7_i386.deb e7327ada6b7c853ce0f638827414b26d9ed4eb40d44e2cea9cf380651509c645 132856 libcharon-extauth-plugins-dbgsym_6.0.1-6+deb13u7_i386.deb 6d63a3a18da51d05eb0e9ad76ec020a442906f7b53bc93ecba7fef91769da62d 100976 libcharon-extauth-plugins_6.0.1-6+deb13u7_i386.deb 2f7675f8c2c73b2a0275e0347d051226f7a52785d22af468974a79c382d0215c 1501032 libcharon-extra-plugins-dbgsym_6.0.1-6+deb13u7_i386.deb a19fe7c2cce6984d640695afdf8fa3794c57108c9522464d4e5429c6b14ea954 309296 libcharon-extra-plugins_6.0.1-6+deb13u7_i386.deb 4696edf300b8a43a3cfa14ec89c05828aef84373bbe9657b43f6a0a4a4072a43 1306540 libstrongswan-dbgsym_6.0.1-6+deb13u7_i386.deb d1d0498331a837f1b42a49d329511b430e17207895741c92d805520677f08d8d 890892 libstrongswan-extra-plugins-dbgsym_6.0.1-6+deb13u7_i386.deb a41bab8625e5c1fb3962048e75c6a7ff34a498708ae1c472d6f7fc82385702a0 374832 libstrongswan-extra-plugins_6.0.1-6+deb13u7_i386.deb 3b3c7fb970138a7e7e0401844a4a23722760c224ba85c651d9f9fa5bea967193 280136 libstrongswan-standard-plugins-dbgsym_6.0.1-6+deb13u7_i386.deb c080bf6c137a7871ec1115b2e4d8f4bb8a4d7342fc2b01a1042bc25ff2e271bc 118844 libstrongswan-standard-plugins_6.0.1-6+deb13u7_i386.deb 2820d46f0e6fd379c78d50b4dd3e6ee0d729247f669ce7c0a1ad6b93ad6137b9 467372 libstrongswan_6.0.1-6+deb13u7_i386.deb 9873a4d528980c2951ebef0027071161356d7420ccd44d365ee474fb2537b662 53124 strongswan-charon-dbgsym_6.0.1-6+deb13u7_i386.deb 4bf3047eed3c63e4640f40ab680496f2211e5dd161842bb3fb6f5a294fdd6aa2 100404 strongswan-charon_6.0.1-6+deb13u7_i386.deb d70b81dfde5e35ca891edee50681ad894ee476957139a545743fccd7824a8258 984996 strongswan-libcharon-dbgsym_6.0.1-6+deb13u7_i386.deb 665eb7b80e157c1fa375756b77433212480da90543184ba69a8bc2e4097af1db 374416 strongswan-libcharon_6.0.1-6+deb13u7_i386.deb 8a3c601c46c81f2ee992e45d76b4294fe367bb4bc47dea1d344ad24eda4c2009 121860 strongswan-nm-dbgsym_6.0.1-6+deb13u7_i386.deb 94428b2cc09f90d0c774a091c1fb5846de18b5302133bcf51c000f17aae886f7 106848 strongswan-nm_6.0.1-6+deb13u7_i386.deb 073142e29a4a9ce85f3e957c0a22d8aed8106fbacf437d90eb57bafd2f9d238f 131000 strongswan-pki-dbgsym_6.0.1-6+deb13u7_i386.deb ed56496a942434298745b0ebe2b6e845bca68c3a00fa36aecfc911fe1593646b 167868 strongswan-pki_6.0.1-6+deb13u7_i386.deb 86264a09f7a6aba4957b1d07b2f83fa0c16ad66bcd72af813ca198e0540b3805 289264 strongswan-starter-dbgsym_6.0.1-6+deb13u7_i386.deb 8ce116c7006e0b58cc0af3818fdf8500078995a5cfa5239a4dc6dd600089a431 232068 strongswan-starter_6.0.1-6+deb13u7_i386.deb 8b542b15739fa55b97135478e83279058833310aba4ef57b0a548c4257ec48f5 323272 strongswan-swanctl-dbgsym_6.0.1-6+deb13u7_i386.deb 582804eb61917bbe562c4a113cd34e910d469388e16cb84923ebf14392553db9 203864 strongswan-swanctl_6.0.1-6+deb13u7_i386.deb e337e42d8cf0be96c82add1e53c587da1f3668e2139e1ff84dae3b353bef3481 19008 strongswan_6.0.1-6+deb13u7_i386-buildd.buildinfo Files: 2d13042deeb4fe24a75262234fb45649 83216 debug optional charon-cmd-dbgsym_6.0.1-6+deb13u7_i386.deb f3dffff82b6e9d1243ea79f3c41cf1cf 99808 net optional charon-cmd_6.0.1-6+deb13u7_i386.deb 5b65a42478a2b078f3b2428993771963 52424 debug optional charon-systemd-dbgsym_6.0.1-6+deb13u7_i386.deb 03056106676f5f68911e9bdada6770d8 95984 net optional charon-systemd_6.0.1-6+deb13u7_i386.deb 93f67e161f49e12df4cd5fe6a0393af4 132856 debug optional libcharon-extauth-plugins-dbgsym_6.0.1-6+deb13u7_i386.deb ff11fa7a7630128b7c637b960cf72a7e 100976 net optional libcharon-extauth-plugins_6.0.1-6+deb13u7_i386.deb d723fbcb812c43757bd411abbbbe6d5a 1501032 debug optional libcharon-extra-plugins-dbgsym_6.0.1-6+deb13u7_i386.deb 2a1e416689b893a334a67c61fcee114a 309296 net optional libcharon-extra-plugins_6.0.1-6+deb13u7_i386.deb 0cedb7b5ebae6bf133a8380348037506 1306540 debug optional libstrongswan-dbgsym_6.0.1-6+deb13u7_i386.deb 562fe5f033d9565243c93597583e5fd5 890892 debug optional libstrongswan-extra-plugins-dbgsym_6.0.1-6+deb13u7_i386.deb 6562374c52df55908f45a8ceaf7d129b 374832 net optional libstrongswan-extra-plugins_6.0.1-6+deb13u7_i386.deb 9756adc6165476beb53c83c0c289ffb8 280136 debug optional libstrongswan-standard-plugins-dbgsym_6.0.1-6+deb13u7_i386.deb 08349a5d51b91b1a2d2ea669b102d4da 118844 net optional libstrongswan-standard-plugins_6.0.1-6+deb13u7_i386.deb 5b5d023cf0b2710429cfd4807234115b 467372 net optional libstrongswan_6.0.1-6+deb13u7_i386.deb a444e5b7577fa9f7ccc1b5c927034d1e 53124 debug optional strongswan-charon-dbgsym_6.0.1-6+deb13u7_i386.deb efad7de0d4409e4531c4d0a9b5992fb2 100404 net optional strongswan-charon_6.0.1-6+deb13u7_i386.deb 71ecf01dcde83166ce79cd4a2abc1e7d 984996 debug optional strongswan-libcharon-dbgsym_6.0.1-6+deb13u7_i386.deb 9049eb8d8d1159460c436729287f5669 374416 net optional strongswan-libcharon_6.0.1-6+deb13u7_i386.deb 87d81bd4006791252db07ebee69225fb 121860 debug optional strongswan-nm-dbgsym_6.0.1-6+deb13u7_i386.deb 0c070a7147de1a17963d91e78827b920 106848 net optional strongswan-nm_6.0.1-6+deb13u7_i386.deb ce4b0ee4fd356a657123cf94ba9cabfe 131000 debug optional strongswan-pki-dbgsym_6.0.1-6+deb13u7_i386.deb cdcf6e305e74e3bbca6fe633e73b9d90 167868 net optional strongswan-pki_6.0.1-6+deb13u7_i386.deb b9ba1dab296b5bd5ea34006d638fb3f9 289264 debug optional strongswan-starter-dbgsym_6.0.1-6+deb13u7_i386.deb a31fe3935b74289c62681a455011c616 232068 net optional strongswan-starter_6.0.1-6+deb13u7_i386.deb 5868a077f9484da214781041149d42d7 323272 debug optional strongswan-swanctl-dbgsym_6.0.1-6+deb13u7_i386.deb ff89feb416ec7e887ef33f470b61db0d 203864 net optional strongswan-swanctl_6.0.1-6+deb13u7_i386.deb 08760ff73875e553347b9d6423eba2a9 19008 net optional strongswan_6.0.1-6+deb13u7_i386-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE+i/sCsF3puL4e7qIGNGWmfrqILEFAmqW2kgACgkQGNGWmfrq ILEgJA//arWfWyVoDGMgYbsau3oycYhu3JHx9teN3OE1w2esn+krRZB1lIAQ8TYB +1wWe41+oTA4ftb6UGL23gJFx6fCAmBp+wiNtMJp5K4gJfxKCKBpz/Rf0j3bv5jA zUSQzX5KXg82ltWkXs5u8g2oWH6C7qYKBwA/gXOwLKwHXgHocWMtvu3z5sQXe+D1 bI5mcYfbX/NIAJ3OwNASCZDcnmUmKIp+VkDaqwlZZ9ZUc3bqX7OI35UjSHMxsRdm AKZ3cirW5nMzAKEBXSR5ZS6aktvIUFFMyW1pL6vOgVQh7OAHOoTKELRKsOVkjdrg SDODUdte5LX4Gbn4J89tHUc/nUPDJGcCwnZ+VbdwAmFIi0tgPvWh9nQLWnpgXEu6 Haxc0qJlCrtviaiWG8K/jQChMd3jGY2YOsRvDCnsDOynJQt25qYkFZ5RJOuLWECm OlR1lBCYo9RZ+xrXTGgV777jMhvz16B4jHd0AsXDM/35xwYWrTlXDeui1spjKs92 DUJKU2mclrzzOexrA+TZEm8pGXBmDBpCt9SkM5ZjxoQqyEpF92Ld91Yt55x+dbPt DdtRFQJ0d2mm/fRxI8/KGK6ziJPHGeWanzVeAL6YwI/w9gB35/ia5fsQfk9F+fRp FUK0QcwArDJZBDQSbcqxIiV5pPOYipWPLGOOH6IBjFEhKJppNqU= =SiKv -----END PGP SIGNATURE-----