-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 06 Aug 2026 16:04:55 +0300 Source: libreswan Architecture: source Version: 5.2-2.5 Distribution: unstable Urgency: medium Maintainer: Daniel Kahn Gillmor <dkg@fifthhorseman.net> Changed-By: Adrian Bunk <bunk@debian.org> Closes: 1133535 1141390 1143067 Changes: libreswan (5.2-2.5) unstable; urgency=medium . * Non-maintainer upload. * Backport upstream fix for FTBFS with GCC 16. (Closes: #1133535) * CVE-2026-50721: IKEv1 Denial of Service via RSA-SHA1 authentication payload * CVE-2026-50722: IKEv2 Denial of Service via RSA-SHA1 authentication payload * CVE-2026-12413: IKEv2 Denial of Service via malformed fragmentation * (Closes: #1141390) * CVE-2026-14957: FIPS mode reachable assertion (Closes: #1143067) Checksums-Sha1: 084a62211c96f02316cc00f5b6d190d1018b2ebb 2640 libreswan_5.2-2.5.dsc 0721c3a88f316023bbe7308c4d88e16509355a05 19076 libreswan_5.2-2.5.debian.tar.xz Checksums-Sha256: 0dce4f1152426e3e7c0a6fb73286e53c118e90db49fd8ba321eebce9baccd6b5 2640 libreswan_5.2-2.5.dsc 69c644a8530d5cd396496688b7347b0c7333d7a8d0baff072cb3990a4a0cc84f 19076 libreswan_5.2-2.5.debian.tar.xz Files: 3e1728206c72c7f9cea54de57515eda9 2640 net optional libreswan_5.2-2.5.dsc eeb668a51210b152929a779d071ed29f 19076 net optional libreswan_5.2-2.5.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEOvp1f6xuoR0v9F3wiNJCh6LYmLEFAmp1Bj8ACgkQiNJCh6LY mLH/IxAAk8UnnWhmsHm5umXckSF7TKmYDKKGZ7qCL5svALN6ptdYQGR2HbGNWuR6 yOhFP0a1B7ovl4iP7uwvldNfNSTI+PPYD5qAeIV0H3uW10O+AU/BKBCQWsPlrvfT EkbpD/+khS4InDvU/Q28Nh5M39ekziwYg5wOH7GrEFcUFx2i5SFidCOjERswBcT3 6gB2algIiZxFhtQSB3OBgDQXPdcCRxDMyVtqWa5if9ScR0zX71jjlCB4jbdPp4sf iITzIrYbEWUZbU1bnNgU3n+CLZZxRIpniH/C3sQAqtixt5zdxoZZqvtTZ6W3eJTd BdfUNDejG+3Gih7pZKNxJCdu6vclpTff3rfDuycJfsymIqNGwZuWkX41+IqH/60e eRdRpzFLg7EeIfYwBjh7Vh1F+jzxUk6+rv+gFXvfWvdNyccFiJ5FAabHviFQFJGa 9cbRVTpJ/jZGkpohNctht6tnRz7kwAwlxRYu50wHh36R6859aUYyhdLUoS/CodEf SfwCL3LscVuTiRCkGINkVVPyq1cop7eqiTCoYgEczg2eokmfKspicJ/Ja+w3yFAu t14UMs5uIsjj+VVkD4GpRaf8Xotx8AN9BMMctAeWgoCHwE5Z7q6VJ84xXOStDuqY d7xbkWPdW943Vt+/xOQ9/AyraEtbG3cguUpZ7F9RiI1oVVKHgvo= =8n5W -----END PGP SIGNATURE-----