-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 02 Nov 2026 09:03:24 -0600 Source: strongswan Architecture: source Version: 5.9.8-5+deb12u6 Distribution: bookworm-security Urgency: high Maintainer: strongSwan Maintainers <pkg-swan-devel@lists.alioth.debian.org> Changed-By: Simon Quigley <tsimonq2@debian.org> Changes: strongswan (5.9.8-5+deb12u6) bookworm-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2026-78123: Fix undefined memory access when verifying PKCS#7 containers. * CVE-2026-78124: Fix memory leaks after enumerating certificates in PKCS#7 containers. * CVE-2026-78126: Fix a NULL-pointer dereference in EAP-AKA. * CVE-2026-78127: Fix a memory leak in IKE message logging. * CVE-2026-78129: Reject oversized PKCS#5 parameters that can stall a thread. * CVE-2026-78130: Fix a NULL-pointer dereference when an attribute certificate has no issuer. * CVE-2026-78131: Fix memory leaks when parsing x509 attribute certificates. * CVE-2026-78132: Fix an infinite loop when parsing x509 attribute certificates. * CVE-2026-78134: Bind the inner EAP identity to the IKE SA. * CVE-2026-78135: Reject CREATE_CHILD_SA on an unestablished IKE SA. Checksums-Sha1: 7a9a39405086de4961ebd2ff16a4af7f82456759 3555 strongswan_5.9.8-5+deb12u6.dsc 4b69a0c86cd5314be561a92a59a911821a40add3 135696 strongswan_5.9.8-5+deb12u6.debian.tar.xz 085e7a5e4946d4983cc4d1c34faea91b2af65ec7 7542 strongswan_5.9.8-5+deb12u6_source.buildinfo Checksums-Sha256: c2207824084c35eb01f58dd2bfe414c6eedb5962b2d9d5df59986137eeaa295e 3555 strongswan_5.9.8-5+deb12u6.dsc f1a39d38e8db26d9537c3d4cd0fba377924bb60139efbc9453d9277bd1305466 135696 strongswan_5.9.8-5+deb12u6.debian.tar.xz 568fdc6695c86f7bf38719533d3c82a25a43f7b7d428bcaf8ce46dfc84fb79f0 7542 strongswan_5.9.8-5+deb12u6_source.buildinfo Files: 860b087f89ae35ed307f5d4a8c8e7881 3555 net optional strongswan_5.9.8-5+deb12u6.dsc f0b0b296249503e4b1525af87bf7d55c 135696 net optional strongswan_5.9.8-5+deb12u6.debian.tar.xz b59fbd510e2cce9cf1ea1df6ee3cf70b 7542 net optional strongswan_5.9.8-5+deb12u6_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXHq+og+GMEWcyMi14n8s+EWML6QFAmrop2UACgkQ4n8s+EWM L6RlNxAAn/j/7sjFKf+azGm+IKB0OgS/HNDHmAe/KAVOU+Z0K0SvjJ6XB/Y4NNhv wrXcWbL5yor+5IZ6bBQsEjDkvt0R0n5OsrxmReIxnYZTjmtHyz7DNNpx2IrPu9yy WQwLqU5hqqgGyvkXFSUU+eZNHObrMb+vdp+sdHfJ9HvzAx4IFIKpkmVlRRjq0OQP hqML4u7i+B0V0EpjWUbEuFRS7qSnHZj1pgdcV0DM0F2Jb0CNoxx1orn/2SBhB6BR eXMrHKTH9jsSqa/mwO961ElXWdE9eXdh0gpO9WpAru8i2+Ufvz36T18bgVZcI8Vb zEaJE6ngvJ/KnS17ErMc4BzkK/CiZ64r6+/JUiWQ8jnA5EUIiDBPuw2O9NollIc2 8/qKBBEMH8uCOqqjzF6bworPKmz8ox8a3Yyx+7unWWGprRTKBcZSI9EY7Ac9Tq07 6AHEnqaf4CoB73Vwj1DPMS9wDgMW3nh5oA5FblXkX/Iy4Q8ooFFruQIhVC7AS1ir TVviyfN7V4OU38CzN30ee3L4WDcegnbQDF//xbnIkIR6289BK2MXEYBfuy7zxSjv lOOaLjNqKgQBo+j62PtTEd2Sty/ogpJ95aesS0r+sG2C9FMD7gbc4aHreRyQaZlp YxhK5LSnZxb8/eGJ92gOpkOy549Ne5SpbbaKwM2x6EbDc3ah1hY= =gVvG -----END PGP SIGNATURE-----
