-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 01 Sep 2026 13:29:28 +0200 Source: strongswan Binary: charon-cmd charon-cmd-dbgsym charon-systemd charon-systemd-dbgsym libcharon-extauth-plugins libcharon-extauth-plugins-dbgsym libcharon-extra-plugins libcharon-extra-plugins-dbgsym libstrongswan libstrongswan-dbgsym libstrongswan-extra-plugins libstrongswan-extra-plugins-dbgsym libstrongswan-standard-plugins libstrongswan-standard-plugins-dbgsym strongswan-charon strongswan-charon-dbgsym strongswan-libcharon strongswan-libcharon-dbgsym strongswan-nm strongswan-nm-dbgsym strongswan-pki strongswan-pki-dbgsym strongswan-starter strongswan-starter-dbgsym strongswan-swanctl strongswan-swanctl-dbgsym Architecture: s390x Version: 6.0.1-6+deb13u7 Distribution: trixie-security Urgency: medium Maintainer: s390x Build Daemon (ziehrer) Changed-By: Yves-Alexis Perez Description: charon-cmd - standalone IPsec client charon-systemd - strongSwan IPsec client, systemd support libcharon-extauth-plugins - strongSwan charon library (extended authentication plugins) libcharon-extra-plugins - strongSwan charon library (extra plugins) libstrongswan - strongSwan utility and crypto library libstrongswan-extra-plugins - strongSwan utility and crypto library (extra plugins) libstrongswan-standard-plugins - strongSwan utility and crypto library (standard plugins) strongswan-charon - strongSwan Internet Key Exchange daemon strongswan-libcharon - strongSwan charon library strongswan-nm - strongSwan plugin to interact with NetworkManager strongswan-pki - strongSwan IPsec client, pki command strongswan-starter - strongSwan daemon starter and configuration file parser strongswan-swanctl - strongSwan IPsec client, swanctl command Changes: strongswan (6.0.1-6+deb13u7) trixie-security; urgency=medium . * d/patches: add fix for undefined memory access when verifying PKCS#7 containers (CVE-2026-78123) * d/patches: add patch to fix memory leaks after enumerating certificates in PKCS#7 containers (CVE-2026-78124) * d/patches: fix NULL-pointer dereference in EAP-AKA (CVE-2026-78126) * d/patches: avoid memory leak in IKE message logging (CVE-2026-78127) * d/patches: fix potential DoS by validating PKCS#5 parsed parameters (CVE-2026-78129) * d/patches: fix NULL-pointer dereference in x509 code (CVE-2026-78130) * d/patches: fix memory leak when parsing x509 attribute certificates (CVE-2026-78131) * d/patches: fix infinite loop when parsing x509 attribute certificates (CVE-2026-78132) * d/patches: fix use-after-free in IKEv2 rekeying (CVE-2026-78133) * d/patches: fix several issues with binding identities to the IKE SA (CVE-2026-78134) * d/patches: properly reject CREATE_CHILD_SA requests on unestablished IKE_SA (CVE-2026-78135) Checksums-Sha1: 300f8c8c552b80ee02d464610773dee105545719 78908 charon-cmd-dbgsym_6.0.1-6+deb13u7_s390x.deb e23452abdad60e346814ecaad11821e40e93408c 98996 charon-cmd_6.0.1-6+deb13u7_s390x.deb 11d7ddb8f5bad0591856334c8004b3df03ca64f7 53340 charon-systemd-dbgsym_6.0.1-6+deb13u7_s390x.deb 374aff57f098d3bb835db8e5edaa1ffeeaa40ad0 95680 charon-systemd_6.0.1-6+deb13u7_s390x.deb 4449ebf2825f595f4a1e64a6eeb2aa561230653f 107756 libcharon-extauth-plugins-dbgsym_6.0.1-6+deb13u7_s390x.deb 59295207d1452d369f6ea44a9e2fd21050236203 100804 libcharon-extauth-plugins_6.0.1-6+deb13u7_s390x.deb 7850a4404df94bad65559d9f013c31d4cab042c5 1526968 libcharon-extra-plugins-dbgsym_6.0.1-6+deb13u7_s390x.deb 0d68fbf8b765220f68a9202cfdaf89f7e75f684d 292984 libcharon-extra-plugins_6.0.1-6+deb13u7_s390x.deb 38c51a7775821c5bcb25ffa1ab7f100e7cf42a8c 1395400 libstrongswan-dbgsym_6.0.1-6+deb13u7_s390x.deb db5656ceb2a192fcd01f5d52f1419b7a4a9688d9 811492 libstrongswan-extra-plugins-dbgsym_6.0.1-6+deb13u7_s390x.deb 7e01536aceb1d3ddb5c1296e9d6166b8d84f4f10 362048 libstrongswan-extra-plugins_6.0.1-6+deb13u7_s390x.deb 75647de0525cfbef5f174501bd8afd9e16732ebd 137544 libstrongswan-standard-plugins-dbgsym_6.0.1-6+deb13u7_s390x.deb 2aa9471bdd88b5e607c8b6704481c887c46eeca1 103108 libstrongswan-standard-plugins_6.0.1-6+deb13u7_s390x.deb dfb293ab27fd3661dfd51b9eb1403ffc7c42f32f 444836 libstrongswan_6.0.1-6+deb13u7_s390x.deb 52f8880450ea4e98984ac7e2d4ddfe3ab8b5b9f0 53656 strongswan-charon-dbgsym_6.0.1-6+deb13u7_s390x.deb 016c4a990e1759e21b7efa4320aef65586ca38d1 100292 strongswan-charon_6.0.1-6+deb13u7_s390x.deb fbc3ff43078d2624ff14efe2f4b76fd143dd6d3b 1095860 strongswan-libcharon-dbgsym_6.0.1-6+deb13u7_s390x.deb 3a0f3c0f9152dfcb8f160e7d78b936dd485794b9 344188 strongswan-libcharon_6.0.1-6+deb13u7_s390x.deb d389167c27600b3ede2419d7210bd0b9ad2e206c 105268 strongswan-nm-dbgsym_6.0.1-6+deb13u7_s390x.deb 847b45606f4519f0511acb2272b4fec8cf143ec5 104440 strongswan-nm_6.0.1-6+deb13u7_s390x.deb c3ef0a4e002097ef693ca0a359b744a11716e5d6 143112 strongswan-pki-dbgsym_6.0.1-6+deb13u7_s390x.deb 653aeeec7b33f4ae0aa3ac72ddb8dc2e0364952b 163460 strongswan-pki_6.0.1-6+deb13u7_s390x.deb 9735e7008ce7928e607155779ab35836dca345d0 291720 strongswan-starter-dbgsym_6.0.1-6+deb13u7_s390x.deb 2be90c0cc761dc78a6eb8c889b016b48b5a9b182 224828 strongswan-starter_6.0.1-6+deb13u7_s390x.deb 72fefad3fe1bca0dc773794c539fda06dd4d8d57 347008 strongswan-swanctl-dbgsym_6.0.1-6+deb13u7_s390x.deb ba1fe1856887d2e20e4f25d6b5e26627e2993424 192136 strongswan-swanctl_6.0.1-6+deb13u7_s390x.deb 60a7a3f54c6a691ba4516c346fb72cc9a9989096 19044 strongswan_6.0.1-6+deb13u7_s390x-buildd.buildinfo Checksums-Sha256: 85934fe57162dcf0c2cc579a69fd5ee364709a420bc2346e254cc3ee0c9bf057 78908 charon-cmd-dbgsym_6.0.1-6+deb13u7_s390x.deb 91ad29379f441b0b7c1209af237c5dd5131fa6957eb61ba7e35414eb8050a51b 98996 charon-cmd_6.0.1-6+deb13u7_s390x.deb 82a096a8d313bddf019c8b2c9d2e8079f02d2e5b3260889a19cab3b381745ad1 53340 charon-systemd-dbgsym_6.0.1-6+deb13u7_s390x.deb 7953ed2f635843f31fce89aed765c1798904b69b2e240645034acee873d04775 95680 charon-systemd_6.0.1-6+deb13u7_s390x.deb 59ce7d35b07e0378cee2bad1707a0ac3da7b56ab5bcda8449354c04b90ac1ccb 107756 libcharon-extauth-plugins-dbgsym_6.0.1-6+deb13u7_s390x.deb 7a399be3f4bf069dcd00edef0c732927986a1df2471e128bcadd23af25f6157c 100804 libcharon-extauth-plugins_6.0.1-6+deb13u7_s390x.deb e31ebd3a24b6618e36ef157ebaa328e0a1a3640f21aa9f4f66ebd104c39f3e59 1526968 libcharon-extra-plugins-dbgsym_6.0.1-6+deb13u7_s390x.deb 20705130a42699f292f4397ec38b7fa10c9f9593df453c6b4ceb96368dbcf251 292984 libcharon-extra-plugins_6.0.1-6+deb13u7_s390x.deb 52951eb84cfadfb607ee695ef681af3a669bfeec56496183ea71b6ab7c769daa 1395400 libstrongswan-dbgsym_6.0.1-6+deb13u7_s390x.deb a5b5814fc5e7c5417e20341e875d0c738b76036fa820fab2c8b4e60bb30f6c20 811492 libstrongswan-extra-plugins-dbgsym_6.0.1-6+deb13u7_s390x.deb fd4d9da41829c1c88232ca48bdc41c26075dcfafaebcaae0c261880349e2ef51 362048 libstrongswan-extra-plugins_6.0.1-6+deb13u7_s390x.deb e0b7dbce512304d42a6f18c8de36d0ca40f7d18d9f8d2d71367774bcc21663dd 137544 libstrongswan-standard-plugins-dbgsym_6.0.1-6+deb13u7_s390x.deb ecfdce38cd694c3ffed6400e10c81b9ee694416e3720b4f49481ee3a6433ff57 103108 libstrongswan-standard-plugins_6.0.1-6+deb13u7_s390x.deb 9b70e853bd76bf63e2c2044d167e0f5fe4a6b101544b638b6566c55baf678bd5 444836 libstrongswan_6.0.1-6+deb13u7_s390x.deb a13a74c5c1f4cdc8207246daac90379e7b993506a9a3a1bff5283e8b99f6a9b7 53656 strongswan-charon-dbgsym_6.0.1-6+deb13u7_s390x.deb 002bb32c3da912bca0ef95599fc79fb2553740881ad69de8ea864e2e89d98247 100292 strongswan-charon_6.0.1-6+deb13u7_s390x.deb 9658f12d09f796ee9c1408e4791fb08e6263df981d6751bd39e6da75f21947bf 1095860 strongswan-libcharon-dbgsym_6.0.1-6+deb13u7_s390x.deb 7aac086a52e207f483d2c77134ab2e3188b5a7875b5938608c322a2d47c2b7d2 344188 strongswan-libcharon_6.0.1-6+deb13u7_s390x.deb 2905afd84ae46015520d13186aea4f6b1e97c1ac9974d3f73b01663300d1a221 105268 strongswan-nm-dbgsym_6.0.1-6+deb13u7_s390x.deb fc7700e358c313faed42f88ee32fab2dd4820b2c4881adec881b4cf9a2912ab2 104440 strongswan-nm_6.0.1-6+deb13u7_s390x.deb 5ac9e2483250048fcdb8d42b4e864eedb2d9aa1d57a18068aa614305b6f41043 143112 strongswan-pki-dbgsym_6.0.1-6+deb13u7_s390x.deb 4c32b9a34d2969adf957159bf815f03db3bd728541e3d28cb89e1d6aeb6b135a 163460 strongswan-pki_6.0.1-6+deb13u7_s390x.deb 6028287d8800c356bddc740976262695fdd5f9cd3fffeaab36ca2a03da4073e3 291720 strongswan-starter-dbgsym_6.0.1-6+deb13u7_s390x.deb b6a8b1f4eb72a2d022ebff993ec82d895aa8b0623b3f72c9bcae4a3f9262dcaa 224828 strongswan-starter_6.0.1-6+deb13u7_s390x.deb a8877cb88a17231d30a1f53e11484ae24c5d22b4f676055a03c1ca261fed5a9c 347008 strongswan-swanctl-dbgsym_6.0.1-6+deb13u7_s390x.deb e37c0cd1d80e2e4d94297a11c150861abde8e3ac0177bc0a0d91f6ffb835deb1 192136 strongswan-swanctl_6.0.1-6+deb13u7_s390x.deb 0f9381b9792153d4e40b854a2e291aa7bdd5eb7af150ed5c8c3d04a4a9c7c266 19044 strongswan_6.0.1-6+deb13u7_s390x-buildd.buildinfo Files: 4a9ef30b6b05a75be2038f961572a0a9 78908 debug optional charon-cmd-dbgsym_6.0.1-6+deb13u7_s390x.deb 9fe4330307c1f2694dbe7b5f41644cc9 98996 net optional charon-cmd_6.0.1-6+deb13u7_s390x.deb 1b9ce2523e938d52b0907b42fb53a1e6 53340 debug optional charon-systemd-dbgsym_6.0.1-6+deb13u7_s390x.deb 3ae8ab88fc20a95e4717d2950ad5cef7 95680 net optional charon-systemd_6.0.1-6+deb13u7_s390x.deb 40df86240ac2a6652349efbc1b04e185 107756 debug optional libcharon-extauth-plugins-dbgsym_6.0.1-6+deb13u7_s390x.deb 7024efe7a3de959244be89858a49b020 100804 net optional libcharon-extauth-plugins_6.0.1-6+deb13u7_s390x.deb c0c46acbc213121b5713cb6601356879 1526968 debug optional libcharon-extra-plugins-dbgsym_6.0.1-6+deb13u7_s390x.deb b68dc7508cf032702c0f20ea3802e71d 292984 net optional libcharon-extra-plugins_6.0.1-6+deb13u7_s390x.deb f8603bf2aa20dd82c5b6b25a29267f0e 1395400 debug optional libstrongswan-dbgsym_6.0.1-6+deb13u7_s390x.deb 87f3b0e8588e782153b51ba5ffb8e7b5 811492 debug optional libstrongswan-extra-plugins-dbgsym_6.0.1-6+deb13u7_s390x.deb 0fb98699e9d0706fa0e6a4194fd8650c 362048 net optional libstrongswan-extra-plugins_6.0.1-6+deb13u7_s390x.deb 1b4d71ac7d129fae1431f302408bca20 137544 debug optional libstrongswan-standard-plugins-dbgsym_6.0.1-6+deb13u7_s390x.deb 849703c5e11abeea86475ce6e3898ed2 103108 net optional libstrongswan-standard-plugins_6.0.1-6+deb13u7_s390x.deb 6c64d543a35289fa595a4d174da02391 444836 net optional libstrongswan_6.0.1-6+deb13u7_s390x.deb 196b8488e52fa9187723386a1c0c3daf 53656 debug optional strongswan-charon-dbgsym_6.0.1-6+deb13u7_s390x.deb 708704e76814e9fbaac54057da6ff2cd 100292 net optional strongswan-charon_6.0.1-6+deb13u7_s390x.deb a61338b958c6fc895ba733f841e71158 1095860 debug optional strongswan-libcharon-dbgsym_6.0.1-6+deb13u7_s390x.deb 0f075eda86ae114e4660bef05996df3d 344188 net optional strongswan-libcharon_6.0.1-6+deb13u7_s390x.deb fb6938289c65d5c0f1b0697981a9133c 105268 debug optional strongswan-nm-dbgsym_6.0.1-6+deb13u7_s390x.deb 116a06d9fa560114800d378cc35503fa 104440 net optional strongswan-nm_6.0.1-6+deb13u7_s390x.deb 08237ff1ff1fef436b7d9233b34152a5 143112 debug optional strongswan-pki-dbgsym_6.0.1-6+deb13u7_s390x.deb 3c62a98a1fa2454f9262dd2d7efed230 163460 net optional strongswan-pki_6.0.1-6+deb13u7_s390x.deb 5cd08425d4c9454333d3c01cf008d19d 291720 debug optional strongswan-starter-dbgsym_6.0.1-6+deb13u7_s390x.deb db611b0c56205f531996274b5a09decc 224828 net optional strongswan-starter_6.0.1-6+deb13u7_s390x.deb 497231fc8cbf2fe3816d211b007dc86d 347008 debug optional strongswan-swanctl-dbgsym_6.0.1-6+deb13u7_s390x.deb 6d681d8148ec8ed03f5dae92a44db5ba 192136 net optional strongswan-swanctl_6.0.1-6+deb13u7_s390x.deb e1bb82c1ada62aec81b8355ab72b0607 19044 net optional strongswan_6.0.1-6+deb13u7_s390x-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEl0BM/nR+Oj597wRWMWUFebkHnoQFAmqWxbQACgkQMWUFebkH noTtFQ//QcnxtmJPeoL9b+2wWe4npCQLIZqsfTkhinMiq/OKPIwkPBsXb3r7g5Kt OkfWb5o8bzr26qI+getlhgyQLEB2fPWEkqK3cHo02UmW0ETVNKjljFCJ1Lj0mOwK Ik3P0hlcWlyc4F9rGmnL6Bi6ZgmRIBerRNawmJG6AdDrumI0d034UsdxtiONLWZz CClmU5rf3hIo00A7KCkLPAuIzuwmXFWtKPHwfTsrxqD+cPQd9usQMqzrFuE0k4fO uls7mIpIZfpOMX+o0b7mG9GKS3YfoNyboWnp/2J6PAjvJsMm/ERiMyqDcvdQafrn GNZfrGB2WY3L+FO+g0yD5LGzpRyvw0V45O0Qyagtzn5DGlxknEyf0m57TReVEqgw 3afyDfR+qGy1WPe3I5lCGcanxWQvoq4roDXkRT35t3Q5nd47M4NWGME5+B5Dxz0r vsCX+fwsDJzM3Bg4hxv/G1CGfobKlz7JyJ+xnbBEOYxIrlofR19UcfY6bFFr0b/j 6cbdFrSaPrkgnGKeKCQdCA2Dz8VusJIVpyp7ZVfDxPmC2Qc2KhZr6SRtDOYYKs5+ c0beJYGjCxWoWXWpI/HKBEi+ITxq7nBMfkryvOyCaX9A8/GjvdHXE9yBduFlLnsi tlIzx9zr2DyKxN90VLCDudOx9n8mZDLaid2Bi55jYfjYbpgbo6I= =eAaF -----END PGP SIGNATURE-----