-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 07 Sep 2026 21:31:11 +0200
Source: strongswan
Architecture: source
Version: 6.1.0-1
Distribution: unstable
Urgency: medium
Maintainer: strongSwan Maintainers <pkg-swan-devel@lists.alioth.debian.org>
Changed-By: Yves-Alexis Perez <corsac@debian.org>
Changes:
strongswan (6.1.0-1) unstable; urgency=medium
.
* New upstream version 6.1.0
* Includes multiple security fixes
- fix for undefined memory access when verifying PKCS#7 containers
(CVE-2026-78123)
- patch to fix memory leaks after enumerating certificates in PKCS#7
containers (CVE-2026-78124)
- fix NULL-pointer dereference in EAP-AKA (CVE-2026-78126)
- avoid memory leak in IKE message logging (CVE-2026-78127)
- fix potential DoS by validating PKCS#5 parsed parameters
(CVE-2026-78129)
- fix NULL-pointer dereference in x509 code (CVE-2026-78130)
- fix memory leak when parsing x509 attribute certificates
(CVE-2026-78131)
- fix infinite loop when parsing x509 attribute certificates
(CVE-2026-78132)
- fix use-after-free in IKEv2 rekeying (CVE-2026-78133)
- fix several issues with binding identities to the IKE SA
(CVE-2026-78134)
- properly reject CREATE_CHILD_SA requests on unestablished IKE_SA
(CVE-2026-78135)
* remove plugins obsoleted in 6.1.0
* document IKEv1 protocol as disabled
Checksums-Sha1:
985dea1d934a87c81b7b8bf9d4687d226ee4e24f 3171 strongswan_6.1.0-1.dsc
ee75e312f1223817adf2afeb9e768de3cb34869f 4620545 strongswan_6.1.0.orig.tar.bz2
94a9979d63d9da5d8a082fb30796e1a46fe3700d 659 strongswan_6.1.0.orig.tar.bz2.asc
b2cebe89035ea8c2b31511871f0af45000e9d994 128992 strongswan_6.1.0-1.debian.tar.xz
9a67e202efe5ad58061f431b75217c64a9e616da 17919 strongswan_6.1.0-1_amd64.buildinfo
Checksums-Sha256:
b0f85af5d8108ae686532e3d94b429b76849bb6d5de2f4e79e7bb76d1366c166 3171 strongswan_6.1.0-1.dsc
fe6c97481298767213cfc2e9a1da29fdd8018d481ff4cb9cf0283099654f20d4 4620545 strongswan_6.1.0.orig.tar.bz2
0140d19de95085b58b9ecc483fc962b4b0a072d12c26b69a17df4032fae53984 659 strongswan_6.1.0.orig.tar.bz2.asc
39842a073196798e997725a04692b80d7b39ce9420f593d446437d9591cc20c0 128992 strongswan_6.1.0-1.debian.tar.xz
e5400be1582f226547e68db12b16126cbf4977226f39252c06f1ce9358b4b6c4 17919 strongswan_6.1.0-1_amd64.buildinfo
Files:
10a4ff59c79ed1b94b7f4c6d634abc1b 3171 net optional strongswan_6.1.0-1.dsc
c789d4f7389057b6c99860bf1e52ed1e 4620545 net optional strongswan_6.1.0.orig.tar.bz2
c2624212a92b98ee24126caa329668a1 659 net optional strongswan_6.1.0.orig.tar.bz2.asc
2b57458ba67225c6ce956f2fff0cc20c 128992 net optional strongswan_6.1.0-1.debian.tar.xz
ef6f1bef1e77335ff541aefa6f9de29d 17919 net optional strongswan_6.1.0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCgAdFiEE8vi34Qgfo83x35gF3rYcyPpXRFsFAmqfEr8ACgkQ3rYcyPpX
RFvRqAgAoEGrOO5rgT0DprCLczt6gP7SLsQlBj+JGFnhxK0A2p3Ua6KS1muTFOI0
GVE3cnJYNsLGjQWd3b6VadXKOUxVM5uATYiux95vSMEhEhWupXTgDamBhVgl9bnd
M369u9tRsxyf1o2JGDdLuIUEAMPdtozr1Y4twd4B9s+QTgrf5MLxpxl1z5LmwZ19
fhIYdt2NoRi4UBHmDob1pepWnT1kebRlIiM00LfxumvnmOsyoTpm43OB5gzPsUiu
pqqVfi3SsXZDOdkR+FEZ6mLCtYFAxyE3BdBytDWuPkNdr5VBMd14GK4bsJakzJO0
DZOBA8azdaCduDFo+T8w2wP8UznMCA==
=aqi+
-----END PGP SIGNATURE-----
