-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 18 Aug 2017 07:42:58 -0700 Source: strongswan Binary: strongswan libstrongswan strongswan-dbg strongswan-starter strongswan-ikev1 strongswan-ikev2 strongswan-nm Architecture: source all amd64 Version: 4.5.2-1.5+deb7u10 Distribution: wheezy-security Urgency: high Maintainer: Rene Mayrhofer <rmayr@debian.org> Changed-By: Chris Lamb <lamby@debian.org> Description: libstrongswan - strongSwan utility and crypto library strongswan - IPsec VPN solution metapackage strongswan-dbg - strongSwan library and binaries - debugging symbols strongswan-ikev1 - strongSwan Internet Key Exchange (v1) daemon strongswan-ikev2 - strongSwan Internet Key Exchange (v2) daemon strongswan-nm - strongSwan plugin to interact with NetworkManager strongswan-starter - strongSwan daemon starter and configuration file parser Closes: 872155 Changes: strongswan (4.5.2-1.5+deb7u10) wheezy-security; urgency=high . * CVE-2017-11185: Prevent a denial-of-service vulnerability in the gmp plugin. Specific RSA signatures passed to the gmp plugin for verification could cause a null-pointer dereference. Potential triggers are signatures in certificates, but also signatures used during IKE authentication. (Closes: #872155) Checksums-Sha1: 9433f4a6393139da6b75324063d49d45f1169cb2 2544 strongswan_4.5.2-1.5+deb7u10.dsc 2067e64ca71d3dcf873698331027f16f0986f0d6 4632921 strongswan_4.5.2.orig.tar.gz d55d02d8138d7f188b40882ed32a2b38d2556a7b 153304 strongswan_4.5.2-1.5+deb7u10.debian.tar.gz 542e8dd3d79d95905ba100a9610150ed676d77ec 82110 strongswan_4.5.2-1.5+deb7u10_all.deb e14624b810e5c8f36ab06412185f6b624094d39a 524348 libstrongswan_4.5.2-1.5+deb7u10_amd64.deb 5c2386a17b54f1963ace0c823a8e0bbd25d2f715 206774 strongswan-dbg_4.5.2-1.5+deb7u10_amd64.deb 0a0fb7e879cc9335fbfc2d29ecaf1c6c51f8caea 320218 strongswan-starter_4.5.2-1.5+deb7u10_amd64.deb 29590e8479d9a44f2cb40a01cd8d7d4029986c58 346460 strongswan-ikev1_4.5.2-1.5+deb7u10_amd64.deb 4e0580675b163da3e1985ed5a7fa7e0b7e275b51 389678 strongswan-ikev2_4.5.2-1.5+deb7u10_amd64.deb a2568fd698efa426760fced3a7262b46a777f308 59400 strongswan-nm_4.5.2-1.5+deb7u10_amd64.deb Checksums-Sha256: fbf0538067f20aaf73486689043ce23fb69e7f3047065ea8fdc457ecd8f9a51d 2544 strongswan_4.5.2-1.5+deb7u10.dsc 88eeebfe9df6d18f320f396c7236f907e7a34c27f8382c7ce6e4239a7ecce31b 4632921 strongswan_4.5.2.orig.tar.gz a6105154cf218415be5ef14cd569ffc8f33fad0c6e2bb874c5f0e7d6e8cce317 153304 strongswan_4.5.2-1.5+deb7u10.debian.tar.gz 28e1162983ea6a7cee094143d38ebcebe299b990580d4f287f87b57fcfcf2f2d 82110 strongswan_4.5.2-1.5+deb7u10_all.deb 06ff6afc75b294fd905012f891182613e761ab331da90f92f25c2f01362db1d9 524348 libstrongswan_4.5.2-1.5+deb7u10_amd64.deb 465cb3d5cdefaa7ecbb10ff979f831a295ccc322fcbea780300b550033bc20e4 206774 strongswan-dbg_4.5.2-1.5+deb7u10_amd64.deb 044afedf1ae1432d7597a0f3939dc4e507f96f05ed9dd1e89506e118aaedd206 320218 strongswan-starter_4.5.2-1.5+deb7u10_amd64.deb 76969c12e0c899282c36951b83d89d52eb5652f3d5c00fb1f8a45b2c4701ae25 346460 strongswan-ikev1_4.5.2-1.5+deb7u10_amd64.deb ea3ad061ae0b59f0cae7f97750facd3eaea4df1129fe21dcbf5872b9b70fd4ad 389678 strongswan-ikev2_4.5.2-1.5+deb7u10_amd64.deb ae31f21be5517538fc54a4da0ea66ae8c7127d1932ebd01388764974e2e9e3e7 59400 strongswan-nm_4.5.2-1.5+deb7u10_amd64.deb Files: 024b7b633bea3da3185109f5b4cfdee9 2544 net optional strongswan_4.5.2-1.5+deb7u10.dsc 540544397e060b497c7a1d5c9f3f4d10 4632921 net optional strongswan_4.5.2.orig.tar.gz 59539bb61eb98dbbaa9a993ec2989fd5 153304 net optional strongswan_4.5.2-1.5+deb7u10.debian.tar.gz 7579e8acb83ca19d9bb464f7b8960bcb 82110 net optional strongswan_4.5.2-1.5+deb7u10_all.deb 9a4078af6c5d0b4d994ec2e724095a8f 524348 net optional libstrongswan_4.5.2-1.5+deb7u10_amd64.deb 609e85120aae9cba917b767b85dca72e 206774 debug extra strongswan-dbg_4.5.2-1.5+deb7u10_amd64.deb 483f6aebffbee1dd6a326c3e86beaa9c 320218 net optional strongswan-starter_4.5.2-1.5+deb7u10_amd64.deb cdfe42b907bd63ba9ab1052202793ec0 346460 net optional strongswan-ikev1_4.5.2-1.5+deb7u10_amd64.deb 7638a03424976954086897f4f23a20c3 389678 net optional strongswan-ikev2_4.5.2-1.5+deb7u10_amd64.deb 8222e8939e731fd39fe7a32fbc29918b 59400 net optional strongswan-nm_4.5.2-1.5+deb7u10_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAlmW/v4ACgkQHpU+J9Qx Hlgdog//QXlobThvkyqeMCVjurKwh4U2xauwdutBfYbz07Gs6Q8EttFcmphzKmYd GRjYKy6lLYgGHMZNXHrD6HPqbnnbBBKh1msWREoVqSsKfRn/4Z3aML7mvoHKAg4W 1YsYc12pQZIyII92MjdJRFWnZlxykp2JIROTsGPQQIEcxn4KYf2xRUAULIavSNV3 3AukLIq4krUy8RFLu7y3AXYRY1C/bEn5Q4XvM28B8Kek0KdIBjvcpRgcUdJOVsnB wn8k0Rjgiqt8PEUw5w3+VxyTrA3Hijz+Oi8wi5ElefRKrxU937RCSCsNhH/nlWhK hHKpP2l8v6LGxlejG7lUR9ZwpGN3Wvbxa4/N80Vk33Yd1SMCnNJ28kEFllsuuPlz IqDFXm4BDdIWgmpMN+2ruBXSeuIByigNTCAxSedse6iXn6zMGFeex4qipT3vP+Z2 qaGnZZcPwmbo4ZZTI98wRPo1HrnqSXs2pHBK6ygihKaj3udrNkKrnIUccUOCnpES DSACgz8ft1no05g0e8W8poG2me2GaeBFNS3iMbCmGpHh9wWzoQPCpMCaK4aeLHie S5jzFgbfAMmfwSLwSslXL6HxdRlgd3YkeW5iFqsxzcP6q0B0AcQaCp3qZJ+pWjre gcnSc9k+nh+TqIxClFmifPdIETRXb5hXRza+reBiZe2SNu3dvxw= =2NBA -----END PGP SIGNATURE-----