-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 01 Sep 2026 13:29:28 +0200
Source: strongswan
Architecture: source
Version: 6.0.1-6+deb13u7
Distribution: trixie-security
Urgency: medium
Maintainer: strongSwan Maintainers <pkg-swan-devel@lists.alioth.debian.org>
Changed-By: Yves-Alexis Perez <corsac@debian.org>
Changes:
strongswan (6.0.1-6+deb13u7) trixie-security; urgency=medium
.
* d/patches: add fix for undefined memory access when verifying PKCS#7
containers (CVE-2026-78123)
* d/patches: add patch to fix memory leaks after enumerating certificates in
PKCS#7 containers (CVE-2026-78124)
* d/patches: fix NULL-pointer dereference in EAP-AKA (CVE-2026-78126)
* d/patches: avoid memory leak in IKE message logging (CVE-2026-78127)
* d/patches: fix potential DoS by validating PKCS#5 parsed parameters
(CVE-2026-78129)
* d/patches: fix NULL-pointer dereference in x509 code (CVE-2026-78130)
* d/patches: fix memory leak when parsing x509 attribute certificates
(CVE-2026-78131)
* d/patches: fix infinite loop when parsing x509 attribute certificates
(CVE-2026-78132)
* d/patches: fix use-after-free in IKEv2 rekeying (CVE-2026-78133)
* d/patches: fix several issues with binding identities to the IKE SA
(CVE-2026-78134)
* d/patches: properly reject CREATE_CHILD_SA requests on unestablished
IKE_SA (CVE-2026-78135)
Checksums-Sha1:
4b84ea395ef30d885d53906fc0751f606d4c2c49 3211 strongswan_6.0.1-6+deb13u7.dsc
c6fba5b4f16f4befc814bccfcb1caa9b1477c891 155268 strongswan_6.0.1-6+deb13u7.debian.tar.xz
8c20b8ed5c1b68b8e9a7fa82502e4e7075205695 19220 strongswan_6.0.1-6+deb13u7_amd64.buildinfo
Checksums-Sha256:
540de5c7adc9f18b2ee410e08ae08568a5117af6c0ffc4c0756ce143556b70cf 3211 strongswan_6.0.1-6+deb13u7.dsc
1a07f23da2ee47b2ce48264a4682c2fec97b757ddd9a12f6ce5c62106741826b 155268 strongswan_6.0.1-6+deb13u7.debian.tar.xz
7472a94afda8268732da970f1cd220d2cfafdfd106bb611470ec253dd04bd01c 19220 strongswan_6.0.1-6+deb13u7_amd64.buildinfo
Files:
bce3a652c9c3aa2a94e147c3f7099f9c 3211 net optional strongswan_6.0.1-6+deb13u7.dsc
26a7b86c9ad32e1054c037053e302576 155268 net optional strongswan_6.0.1-6+deb13u7.debian.tar.xz
79fe51a7f9532a58e1805db62509b96c 19220 net optional strongswan_6.0.1-6+deb13u7_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCgAdFiEE8vi34Qgfo83x35gF3rYcyPpXRFsFAmqWudsACgkQ3rYcyPpX
RFvb6ggAtVj2rUsBdIGqF9O53rSD+i08c2TxjUZDX7MMP/TUHrAYBXWZHYklvhuH
vECVwnpuL+Wj/GyCCtkTdaBfW8GG28GxOSK+fFtFhPuuLjr5m8ajuY3gMp8EC53i
ukfTU10xQHdhYboZZq81/gV2AhUnPhDZFd+siGSgH0tDP76rKxJbc4N75UDKyfNo
9zOTZvnx8OHUxAIELX0ZKYhzehU4m9jdvKSTOfItCgszDAkARplGeLhqGXT4a78w
0zVdltS8dNHkDTIflIlCZFv7cRVtNP4XvI9Puk2OBsP+7bTn6Y91DSbjbRUkQhIf
ehZ/YfHQQ1oet+snX+wZN8vIRYUiUw==
=dBWZ
-----END PGP SIGNATURE-----
