-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 01 Sep 2026 13:29:28 +0200 Source: strongswan Binary: strongswan Architecture: all Version: 6.0.1-6+deb13u7 Distribution: trixie-security Urgency: medium Maintainer: all Build Daemon (x86-csail-02) Changed-By: Yves-Alexis Perez Description: strongswan - IPsec VPN solution metapackage Changes: strongswan (6.0.1-6+deb13u7) trixie-security; urgency=medium . * d/patches: add fix for undefined memory access when verifying PKCS#7 containers (CVE-2026-78123) * d/patches: add patch to fix memory leaks after enumerating certificates in PKCS#7 containers (CVE-2026-78124) * d/patches: fix NULL-pointer dereference in EAP-AKA (CVE-2026-78126) * d/patches: avoid memory leak in IKE message logging (CVE-2026-78127) * d/patches: fix potential DoS by validating PKCS#5 parsed parameters (CVE-2026-78129) * d/patches: fix NULL-pointer dereference in x509 code (CVE-2026-78130) * d/patches: fix memory leak when parsing x509 attribute certificates (CVE-2026-78131) * d/patches: fix infinite loop when parsing x509 attribute certificates (CVE-2026-78132) * d/patches: fix use-after-free in IKEv2 rekeying (CVE-2026-78133) * d/patches: fix several issues with binding identities to the IKE SA (CVE-2026-78134) * d/patches: properly reject CREATE_CHILD_SA requests on unestablished IKE_SA (CVE-2026-78135) Checksums-Sha1: c7360219e9434f8e5b9566b04a18f9e500bbbb07 10792 strongswan_6.0.1-6+deb13u7_all-buildd.buildinfo 01a7334386793ec7bc8f2e456a41ac4ec5a88c0f 95460 strongswan_6.0.1-6+deb13u7_all.deb Checksums-Sha256: 0d59e5e18ed0e0b9ea1607541ef0e34e8b9a33cf6dd50d0b2f3a25ebd9634704 10792 strongswan_6.0.1-6+deb13u7_all-buildd.buildinfo 40c5a40bdb95f71dc412222aaa061d16cd943bc46b796aa0714e5732cfe1462a 95460 strongswan_6.0.1-6+deb13u7_all.deb Files: 0244f108e8ec43d2fb7db3b39798cd69 10792 net optional strongswan_6.0.1-6+deb13u7_all-buildd.buildinfo 8406a43ef85f01ef87b6d9d7c4f52ef4 95460 net optional strongswan_6.0.1-6+deb13u7_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXLxUpUHQBQBTDtd4aBVi67oXtfkFAmqW2s4ACgkQaBVi67oX tfkLVxAAxRM1W+Dil7A4Az3UBrYmQ3PMsNAEhYgPnKm4E+66fQRpF1MpZEXB/Wqj iEQKz+ccakevAB7TjT+f1YHfStpwyppU2aXEkrzifPXieBwqPXFrZRM84Xa1Gvyf l6lLo9UB9QgSlV2yLTwTTVLV72Sj0zhFcLrlZoi3B/SUkRWr2gCkysVP56ExOL18 bwmbT/EWvclEXwodUoyUVsz2nRXZ/xo71h6uuH7iK7PZ2vyu64HJulo3FA7tzTY6 M3wENnmAmhq++hfkGPx7lLf+avDkVyXxMZdx0f8UJguQyWmCeJZNYNjoWQo40AVI p7IXKvrCDIEfjdC876awQHv9GeFHmgHc+mP8/IkRs2ktJSPYIV1D4YTWPJwLIcDY 6H9gbQKBtxupuiIBA8LV+n9MmFddct30i7LhlKOb0V2GDYHKk3pg3/2p2zcRY2jj 2QrExGYlRXTeKUVPmarXm45EBLDe0r+d9AxFqiClNXfss8jDXOxsLSJ7Ji3+Om0s E1FHcbHeD+ORu/GwrC2P9yko9BRNTEa9blKzxdBG4q+55HmqbfyO7hU+OzV+TT3s vYqqD5lV1tkk0r2conFaoNAuMyxF1xeNEwgwIpTb+269x6SS9mp2p1nBTSw6taOo ycbjL8hUAhF2JZ8+9RWAgVP3m+jLkq9Aulg0D7asccb2QEAUUo0= =MqVo -----END PGP SIGNATURE-----