-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 01 Sep 2026 13:29:28 +0200 Source: strongswan Binary: charon-cmd charon-cmd-dbgsym charon-systemd charon-systemd-dbgsym libcharon-extauth-plugins libcharon-extauth-plugins-dbgsym libcharon-extra-plugins libcharon-extra-plugins-dbgsym libstrongswan libstrongswan-dbgsym libstrongswan-extra-plugins libstrongswan-extra-plugins-dbgsym libstrongswan-standard-plugins libstrongswan-standard-plugins-dbgsym strongswan-charon strongswan-charon-dbgsym strongswan-libcharon strongswan-libcharon-dbgsym strongswan-nm strongswan-nm-dbgsym strongswan-pki strongswan-pki-dbgsym strongswan-starter strongswan-starter-dbgsym strongswan-swanctl strongswan-swanctl-dbgsym Architecture: riscv64 Version: 6.0.1-6+deb13u7 Distribution: trixie-security Urgency: medium Maintainer: riscv64 Build Daemon (rv-manda-03) Changed-By: Yves-Alexis Perez Description: charon-cmd - standalone IPsec client charon-systemd - strongSwan IPsec client, systemd support libcharon-extauth-plugins - strongSwan charon library (extended authentication plugins) libcharon-extra-plugins - strongSwan charon library (extra plugins) libstrongswan - strongSwan utility and crypto library libstrongswan-extra-plugins - strongSwan utility and crypto library (extra plugins) libstrongswan-standard-plugins - strongSwan utility and crypto library (standard plugins) strongswan-charon - strongSwan Internet Key Exchange daemon strongswan-libcharon - strongSwan charon library strongswan-nm - strongSwan plugin to interact with NetworkManager strongswan-pki - strongSwan IPsec client, pki command strongswan-starter - strongSwan daemon starter and configuration file parser strongswan-swanctl - strongSwan IPsec client, swanctl command Changes: strongswan (6.0.1-6+deb13u7) trixie-security; urgency=medium . * d/patches: add fix for undefined memory access when verifying PKCS#7 containers (CVE-2026-78123) * d/patches: add patch to fix memory leaks after enumerating certificates in PKCS#7 containers (CVE-2026-78124) * d/patches: fix NULL-pointer dereference in EAP-AKA (CVE-2026-78126) * d/patches: avoid memory leak in IKE message logging (CVE-2026-78127) * d/patches: fix potential DoS by validating PKCS#5 parsed parameters (CVE-2026-78129) * d/patches: fix NULL-pointer dereference in x509 code (CVE-2026-78130) * d/patches: fix memory leak when parsing x509 attribute certificates (CVE-2026-78131) * d/patches: fix infinite loop when parsing x509 attribute certificates (CVE-2026-78132) * d/patches: fix use-after-free in IKEv2 rekeying (CVE-2026-78133) * d/patches: fix several issues with binding identities to the IKE SA (CVE-2026-78134) * d/patches: properly reject CREATE_CHILD_SA requests on unestablished IKE_SA (CVE-2026-78135) Checksums-Sha1: 9ba38b2185fbd2a3141c3bdbe9babd3d3de355e7 85652 charon-cmd-dbgsym_6.0.1-6+deb13u7_riscv64.deb 9a1ffe4fbed583fc9d6d7f8cf5913d4de897d1a5 99140 charon-cmd_6.0.1-6+deb13u7_riscv64.deb bfbac16c480bc6804b52761b7a3a380a15c6c00b 53960 charon-systemd-dbgsym_6.0.1-6+deb13u7_riscv64.deb ec4a1c1aaea4bbc5bf4f79c496f77febf7deafb6 95600 charon-systemd_6.0.1-6+deb13u7_riscv64.deb c94b30bb6e9a9f9137104a533a7489c5d73a34de 133324 libcharon-extauth-plugins-dbgsym_6.0.1-6+deb13u7_riscv64.deb 26c7f75c6c9cc28e1f62e0d2d202a85d2aa087a6 100784 libcharon-extauth-plugins_6.0.1-6+deb13u7_riscv64.deb 91819d0970874d67aec786714d78b822aba88989 1558712 libcharon-extra-plugins-dbgsym_6.0.1-6+deb13u7_riscv64.deb 9992b86fb787f825c7583a950408a9361dae251b 292140 libcharon-extra-plugins_6.0.1-6+deb13u7_riscv64.deb 48b284b7bc310ffaf780dacb2aef3eda25f88ac3 1368432 libstrongswan-dbgsym_6.0.1-6+deb13u7_riscv64.deb 1a0b2bf8c09c83900fff52018fd008fb10bbc9af 798244 libstrongswan-extra-plugins-dbgsym_6.0.1-6+deb13u7_riscv64.deb 9f382380ec92c84ce35a47c3b2ccd7e2d378d926 365228 libstrongswan-extra-plugins_6.0.1-6+deb13u7_riscv64.deb 9bd553ec25c81890c04047e8b4701d5349bc6882 154368 libstrongswan-standard-plugins-dbgsym_6.0.1-6+deb13u7_riscv64.deb 686bc24d0c9053b8f0ceb88c7ca0cc2679d2ca1a 103800 libstrongswan-standard-plugins_6.0.1-6+deb13u7_riscv64.deb 34ed3ea44fd6d016ff8fe9a9401fb8f64f79dad2 434224 libstrongswan_6.0.1-6+deb13u7_riscv64.deb bb6916d8d86c010994135698344fc7e211cce721 54316 strongswan-charon-dbgsym_6.0.1-6+deb13u7_riscv64.deb 568304f834673692476076176a3663660453f7b9 100140 strongswan-charon_6.0.1-6+deb13u7_riscv64.deb 7609b6f957f181b950dd0c5d5946eaca36922fec 1088848 strongswan-libcharon-dbgsym_6.0.1-6+deb13u7_riscv64.deb f222b250e0af1953fad33ffd4fa5b71a71f20c14 340268 strongswan-libcharon_6.0.1-6+deb13u7_riscv64.deb 79a7336cea5540daa91c48f010fcdf67b8e64392 126084 strongswan-nm-dbgsym_6.0.1-6+deb13u7_riscv64.deb a44dc27fefdb9eb78908eae04005e6269da0a27c 104192 strongswan-nm_6.0.1-6+deb13u7_riscv64.deb bf90f81def32b116710cf7441f2c0c9d8b389430 142320 strongswan-pki-dbgsym_6.0.1-6+deb13u7_riscv64.deb 08c5e86ec386e4a9a825c230dac09fff7c7f5b83 163576 strongswan-pki_6.0.1-6+deb13u7_riscv64.deb db2f48646b8ec468cd2d7b166e1f0c7d06259460 303664 strongswan-starter-dbgsym_6.0.1-6+deb13u7_riscv64.deb 0d5c9d54d1d14eff550ee0bc537b23d9a0082527 224936 strongswan-starter_6.0.1-6+deb13u7_riscv64.deb 55fe6f5b7e93798d6899eaa6c04bd1074a3fc7a1 361288 strongswan-swanctl-dbgsym_6.0.1-6+deb13u7_riscv64.deb 5bcf88887d3898613841e8059c6e5d6927c42529 196368 strongswan-swanctl_6.0.1-6+deb13u7_riscv64.deb 372859f0c0cf2dd3784f833599e96d533a45725a 19296 strongswan_6.0.1-6+deb13u7_riscv64-buildd.buildinfo Checksums-Sha256: 36aaf7f04a6aae21e393def62e98ad4867682efb670dba949017aa5785c35042 85652 charon-cmd-dbgsym_6.0.1-6+deb13u7_riscv64.deb 0d86b22d6da7ab70e619e18c1eaa3079dd5f49ebf05599b67b63c5a34e988bf0 99140 charon-cmd_6.0.1-6+deb13u7_riscv64.deb f3a8179f07c7a2130a295eacbac00207fd3e247145cb4e7d2661ac6858454a9a 53960 charon-systemd-dbgsym_6.0.1-6+deb13u7_riscv64.deb 77bccb9cadaa8e04899b4cc8b96ddeaa0f50f9e5e6dccfd6028c7b3fa2884a18 95600 charon-systemd_6.0.1-6+deb13u7_riscv64.deb 4c31fe251f956509389a83d7085056517910397babffb876d262c9bfaa190eee 133324 libcharon-extauth-plugins-dbgsym_6.0.1-6+deb13u7_riscv64.deb 55995b5bd5b245d327ba77c8d9286658eac2b3144aa0e253dbb1f26e4eb7fdb7 100784 libcharon-extauth-plugins_6.0.1-6+deb13u7_riscv64.deb 4aaa169d737b5622ebc0643e6c2045cf9973ffea4c9d5d6eeef06cecf96d8564 1558712 libcharon-extra-plugins-dbgsym_6.0.1-6+deb13u7_riscv64.deb ad9698a7918003d254c11f2000d1af418441d6141255fcdd9c4a0d7a23e3f50f 292140 libcharon-extra-plugins_6.0.1-6+deb13u7_riscv64.deb 5000a561cbb02ac2a3c5e9b7f14ca1f94d442544be2955e8b9cd630d3dbea0fd 1368432 libstrongswan-dbgsym_6.0.1-6+deb13u7_riscv64.deb 8febf81b8817a425226ce937d651ff1557edd8bfc8e6f8ca973d79b0cbba688e 798244 libstrongswan-extra-plugins-dbgsym_6.0.1-6+deb13u7_riscv64.deb 9dfc13ff832f38f593a2fb5acbc667138788df9d8d1d862db124448b599becc6 365228 libstrongswan-extra-plugins_6.0.1-6+deb13u7_riscv64.deb 3190d1907b26c31127f69e3bb716fe86b6723898d7cbb8e9af3ae93320fe83f1 154368 libstrongswan-standard-plugins-dbgsym_6.0.1-6+deb13u7_riscv64.deb 961fb6bcd07c5ce84b0cd5d6b7a0cbc3cb03b4a3e8eefd0d17edcf383cecc121 103800 libstrongswan-standard-plugins_6.0.1-6+deb13u7_riscv64.deb 0ed9c14c2f1c65c5344c291850ef4ea589d30ea036bcdedbfc0395e41ec4436e 434224 libstrongswan_6.0.1-6+deb13u7_riscv64.deb fa65c67e1d856e13b129523ed31bbd9f5d16df87a20fa43e67063a697c826a29 54316 strongswan-charon-dbgsym_6.0.1-6+deb13u7_riscv64.deb 972a25e4737a2a1162ce7c2f852f5f7a1d38370990b956a01a0e016ae96bc742 100140 strongswan-charon_6.0.1-6+deb13u7_riscv64.deb 177d1a84f2f24618fa105f6a8ae62f9c880c53aa69e6da5fba4d8d294d673a44 1088848 strongswan-libcharon-dbgsym_6.0.1-6+deb13u7_riscv64.deb 106f2597c2ccf243f5cbbcd4b0ada8336cd5a03f775f427009538a8ebb191f0c 340268 strongswan-libcharon_6.0.1-6+deb13u7_riscv64.deb 51e8e6a777af1d7ca1403f8757c869c6e476ca80d9137364761ebbdec6905567 126084 strongswan-nm-dbgsym_6.0.1-6+deb13u7_riscv64.deb f7c526357d04ea11141e65f7e3491b63fbb4c43d72a2a7669ca65dfe1e80aaf9 104192 strongswan-nm_6.0.1-6+deb13u7_riscv64.deb cad12a4448db25250acf464eb2fe783be19656b5a255a6ddc3e6fdb3519e5704 142320 strongswan-pki-dbgsym_6.0.1-6+deb13u7_riscv64.deb 1558d1cf6e5933788c5fcb809d734621f48f644fe99afe9017a0dac1bac7064b 163576 strongswan-pki_6.0.1-6+deb13u7_riscv64.deb dd41d2397cd2790e3ece7066de3c04f945a85fab1d69ac58dbcdcb29121f9595 303664 strongswan-starter-dbgsym_6.0.1-6+deb13u7_riscv64.deb 11e3d9023ca01e183284cc05c32d539d8d709dcec87d9343698b9dfc00ddd18a 224936 strongswan-starter_6.0.1-6+deb13u7_riscv64.deb bb358d911565050bfc504cf47647185ece6ab900fdfbc0c99c59d75c561d47f3 361288 strongswan-swanctl-dbgsym_6.0.1-6+deb13u7_riscv64.deb d412cdec0624b1c34a7cba723312aafded49af705e4a507dd75378814e53e170 196368 strongswan-swanctl_6.0.1-6+deb13u7_riscv64.deb 95308ec05dba4d0d9ce28e6af3283def93ff902e888c8d47e1b645166654d706 19296 strongswan_6.0.1-6+deb13u7_riscv64-buildd.buildinfo Files: f8c3ec22120791bea2db5053d395d83d 85652 debug optional charon-cmd-dbgsym_6.0.1-6+deb13u7_riscv64.deb 1733d03e5912101c052f95866f9a8642 99140 net optional charon-cmd_6.0.1-6+deb13u7_riscv64.deb 3f52cd0c306800e86811230daa42070a 53960 debug optional charon-systemd-dbgsym_6.0.1-6+deb13u7_riscv64.deb 2b53cf9294794b7c5c1af06e3f7d78eb 95600 net optional charon-systemd_6.0.1-6+deb13u7_riscv64.deb 543427fda863572d362944c0c7e0c141 133324 debug optional libcharon-extauth-plugins-dbgsym_6.0.1-6+deb13u7_riscv64.deb 377d7bf761c1b6582dd8a052bfa88c4c 100784 net optional libcharon-extauth-plugins_6.0.1-6+deb13u7_riscv64.deb ff95c5bf2d2696b1935b94c4630abb0e 1558712 debug optional libcharon-extra-plugins-dbgsym_6.0.1-6+deb13u7_riscv64.deb 497725ab08cd93f21266a51be7010685 292140 net optional libcharon-extra-plugins_6.0.1-6+deb13u7_riscv64.deb 886839cffa180489d3ec688870e476c5 1368432 debug optional libstrongswan-dbgsym_6.0.1-6+deb13u7_riscv64.deb e06d4f09a6eedb5eefc30bb32e1bf7ca 798244 debug optional libstrongswan-extra-plugins-dbgsym_6.0.1-6+deb13u7_riscv64.deb 78ff6558f533c111588effb9fcc6b911 365228 net optional libstrongswan-extra-plugins_6.0.1-6+deb13u7_riscv64.deb 9509b8815f2f4cb4a4fc03097f4f8f77 154368 debug optional libstrongswan-standard-plugins-dbgsym_6.0.1-6+deb13u7_riscv64.deb 8d1f7ae44396840ae268ed027ecc8d73 103800 net optional libstrongswan-standard-plugins_6.0.1-6+deb13u7_riscv64.deb 57d2c25be3621f86eb81df53a9f7f2ae 434224 net optional libstrongswan_6.0.1-6+deb13u7_riscv64.deb 1e60d035617b5bc6a4745714e78a551f 54316 debug optional strongswan-charon-dbgsym_6.0.1-6+deb13u7_riscv64.deb 68f7c42d9dc62372eb8d28c558abe7f7 100140 net optional strongswan-charon_6.0.1-6+deb13u7_riscv64.deb 563fc5920f47e445aa5d9606f8b3a897 1088848 debug optional strongswan-libcharon-dbgsym_6.0.1-6+deb13u7_riscv64.deb 62c02754420f9477019c3ee1ac2ec7c1 340268 net optional strongswan-libcharon_6.0.1-6+deb13u7_riscv64.deb 2480ce58ee0456ccc175daf16f79671b 126084 debug optional strongswan-nm-dbgsym_6.0.1-6+deb13u7_riscv64.deb 1c56055b3453fc8745535b4d0ab2c67d 104192 net optional strongswan-nm_6.0.1-6+deb13u7_riscv64.deb 95b33b66b32691b565697919da8d9355 142320 debug optional strongswan-pki-dbgsym_6.0.1-6+deb13u7_riscv64.deb dfa62014b39e347a9652a8838fe2cc71 163576 net optional strongswan-pki_6.0.1-6+deb13u7_riscv64.deb 098175c9518c9566658f7a8b3757f7b6 303664 debug optional strongswan-starter-dbgsym_6.0.1-6+deb13u7_riscv64.deb 325430d8939a378d3566b04bf6737c5c 224936 net optional strongswan-starter_6.0.1-6+deb13u7_riscv64.deb 68682c868ba03e7f23d524e57a83e70b 361288 debug optional strongswan-swanctl-dbgsym_6.0.1-6+deb13u7_riscv64.deb 9790cf2645ca534b6262c565a03c8d23 196368 net optional strongswan-swanctl_6.0.1-6+deb13u7_riscv64.deb fd75138057caf75db93d948da52ed646 19296 net optional strongswan_6.0.1-6+deb13u7_riscv64-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXZ9jHPkg/vETgMJZlJNduPxUf2oFAmqWx94ACgkQlJNduPxU f2okuRAAgE3hmfQSjB15qo9LesDJLCXx/sNGBV3zCVeq705zbI+pRKuwy2/UPerW dqXLb8tyFc6wJAZOmJuDCg34ux00Ubw/CMoNM/sEMW1iNdTwnDfZJaYVzBM3UIY1 WLWgjwzXcj7q1gKnsVg7KSPNUfYAWcG+1pAwL8YyPTgHhuSBCjI2rsDBFIpu68gs S0gTHLr9QAJdRfLWw/uDf/LYpaJkvCuVMHSauE7gYOnd4bYdCOiW9wUPk61hydhp U2gHow4GTThWMDUGnoTFke6h2gg6xIK3mBDjgEF8LvudzQB228TcknMyqNk45/G1 ibH3uMr/QCscjMRRxrrpUZ6i7zLzCR78y+0rU6b7PuSVXpR4MSdHzCdE9Ti7IRfg EZAj5wymamL033zakPcJu7aeaddy+vWNidzRQjM3sMgRq0dtcRCNDMV7LHAE3Wwr YFvqaKHiQGDRHpV3GxiJ9NTv4wSSm/aHSqgccZa3I911FiDMf02a6FFeRdBnBUga ziEP/mHMoFbz1d+94YHW/JkU3cRpWqKPuieEi9NX0KNJ7GfA6n+vXOIvwLBiuB3x QGoErfkVkz2JH8uKTyJ7XfHZG/LLlagGtXV0uibnesJVPJG4ZBnJWKH+A79MZzm6 dtTdiw/oEuylHawB9FoOtP+dVGJwoH1LtixY3/Y3exNSWA/bWGc= =mfSy -----END PGP SIGNATURE-----