-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 01 Sep 2026 13:29:28 +0200 Source: strongswan Architecture: source Version: 6.0.1-6+deb13u7 Distribution: trixie-security Urgency: medium Maintainer: strongSwan Maintainers Changed-By: Yves-Alexis Perez Changes: strongswan (6.0.1-6+deb13u7) trixie-security; urgency=medium . * d/patches: add fix for undefined memory access when verifying PKCS#7 containers (CVE-2026-78123) * d/patches: add patch to fix memory leaks after enumerating certificates in PKCS#7 containers (CVE-2026-78124) * d/patches: fix NULL-pointer dereference in EAP-AKA (CVE-2026-78126) * d/patches: avoid memory leak in IKE message logging (CVE-2026-78127) * d/patches: fix potential DoS by validating PKCS#5 parsed parameters (CVE-2026-78129) * d/patches: fix NULL-pointer dereference in x509 code (CVE-2026-78130) * d/patches: fix memory leak when parsing x509 attribute certificates (CVE-2026-78131) * d/patches: fix infinite loop when parsing x509 attribute certificates (CVE-2026-78132) * d/patches: fix use-after-free in IKEv2 rekeying (CVE-2026-78133) * d/patches: fix several issues with binding identities to the IKE SA (CVE-2026-78134) * d/patches: properly reject CREATE_CHILD_SA requests on unestablished IKE_SA (CVE-2026-78135) Checksums-Sha1: 4b84ea395ef30d885d53906fc0751f606d4c2c49 3211 strongswan_6.0.1-6+deb13u7.dsc c6fba5b4f16f4befc814bccfcb1caa9b1477c891 155268 strongswan_6.0.1-6+deb13u7.debian.tar.xz 8c20b8ed5c1b68b8e9a7fa82502e4e7075205695 19220 strongswan_6.0.1-6+deb13u7_amd64.buildinfo Checksums-Sha256: 540de5c7adc9f18b2ee410e08ae08568a5117af6c0ffc4c0756ce143556b70cf 3211 strongswan_6.0.1-6+deb13u7.dsc 1a07f23da2ee47b2ce48264a4682c2fec97b757ddd9a12f6ce5c62106741826b 155268 strongswan_6.0.1-6+deb13u7.debian.tar.xz 7472a94afda8268732da970f1cd220d2cfafdfd106bb611470ec253dd04bd01c 19220 strongswan_6.0.1-6+deb13u7_amd64.buildinfo Files: bce3a652c9c3aa2a94e147c3f7099f9c 3211 net optional strongswan_6.0.1-6+deb13u7.dsc 26a7b86c9ad32e1054c037053e302576 155268 net optional strongswan_6.0.1-6+deb13u7.debian.tar.xz 79fe51a7f9532a58e1805db62509b96c 19220 net optional strongswan_6.0.1-6+deb13u7_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEE8vi34Qgfo83x35gF3rYcyPpXRFsFAmqWudsACgkQ3rYcyPpX RFvb6ggAtVj2rUsBdIGqF9O53rSD+i08c2TxjUZDX7MMP/TUHrAYBXWZHYklvhuH vECVwnpuL+Wj/GyCCtkTdaBfW8GG28GxOSK+fFtFhPuuLjr5m8ajuY3gMp8EC53i ukfTU10xQHdhYboZZq81/gV2AhUnPhDZFd+siGSgH0tDP76rKxJbc4N75UDKyfNo 9zOTZvnx8OHUxAIELX0ZKYhzehU4m9jdvKSTOfItCgszDAkARplGeLhqGXT4a78w 0zVdltS8dNHkDTIflIlCZFv7cRVtNP4XvI9Puk2OBsP+7bTn6Y91DSbjbRUkQhIf ehZ/YfHQQ1oet+snX+wZN8vIRYUiUw== =dBWZ -----END PGP SIGNATURE-----