-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 07 Sep 2026 21:31:11 +0200 Source: strongswan Architecture: source Version: 6.1.0-1 Distribution: unstable Urgency: medium Maintainer: strongSwan Maintainers <[email protected]> Changed-By: Yves-Alexis Perez <[email protected]> Changes: strongswan (6.1.0-1) unstable; urgency=medium . * New upstream version 6.1.0 * Includes multiple security fixes - fix for undefined memory access when verifying PKCS#7 containers (CVE-2026-78123) - patch to fix memory leaks after enumerating certificates in PKCS#7 containers (CVE-2026-78124) - fix NULL-pointer dereference in EAP-AKA (CVE-2026-78126) - avoid memory leak in IKE message logging (CVE-2026-78127) - fix potential DoS by validating PKCS#5 parsed parameters (CVE-2026-78129) - fix NULL-pointer dereference in x509 code (CVE-2026-78130) - fix memory leak when parsing x509 attribute certificates (CVE-2026-78131) - fix infinite loop when parsing x509 attribute certificates (CVE-2026-78132) - fix use-after-free in IKEv2 rekeying (CVE-2026-78133) - fix several issues with binding identities to the IKE SA (CVE-2026-78134) - properly reject CREATE_CHILD_SA requests on unestablished IKE_SA (CVE-2026-78135) * remove plugins obsoleted in 6.1.0 * document IKEv1 protocol as disabled Checksums-Sha1: 985dea1d934a87c81b7b8bf9d4687d226ee4e24f 3171 strongswan_6.1.0-1.dsc ee75e312f1223817adf2afeb9e768de3cb34869f 4620545 strongswan_6.1.0.orig.tar.bz2 94a9979d63d9da5d8a082fb30796e1a46fe3700d 659 strongswan_6.1.0.orig.tar.bz2.asc b2cebe89035ea8c2b31511871f0af45000e9d994 128992 strongswan_6.1.0-1.debian.tar.xz 9a67e202efe5ad58061f431b75217c64a9e616da 17919 strongswan_6.1.0-1_amd64.buildinfo Checksums-Sha256: b0f85af5d8108ae686532e3d94b429b76849bb6d5de2f4e79e7bb76d1366c166 3171 strongswan_6.1.0-1.dsc fe6c97481298767213cfc2e9a1da29fdd8018d481ff4cb9cf0283099654f20d4 4620545 strongswan_6.1.0.orig.tar.bz2 0140d19de95085b58b9ecc483fc962b4b0a072d12c26b69a17df4032fae53984 659 strongswan_6.1.0.orig.tar.bz2.asc 39842a073196798e997725a04692b80d7b39ce9420f593d446437d9591cc20c0 128992 strongswan_6.1.0-1.debian.tar.xz e5400be1582f226547e68db12b16126cbf4977226f39252c06f1ce9358b4b6c4 17919 strongswan_6.1.0-1_amd64.buildinfo Files: 10a4ff59c79ed1b94b7f4c6d634abc1b 3171 net optional strongswan_6.1.0-1.dsc c789d4f7389057b6c99860bf1e52ed1e 4620545 net optional strongswan_6.1.0.orig.tar.bz2 c2624212a92b98ee24126caa329668a1 659 net optional strongswan_6.1.0.orig.tar.bz2.asc 2b57458ba67225c6ce956f2fff0cc20c 128992 net optional strongswan_6.1.0-1.debian.tar.xz ef6f1bef1e77335ff541aefa6f9de29d 17919 net optional strongswan_6.1.0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEE8vi34Qgfo83x35gF3rYcyPpXRFsFAmqfEr8ACgkQ3rYcyPpX RFvRqAgAoEGrOO5rgT0DprCLczt6gP7SLsQlBj+JGFnhxK0A2p3Ua6KS1muTFOI0 GVE3cnJYNsLGjQWd3b6VadXKOUxVM5uATYiux95vSMEhEhWupXTgDamBhVgl9bnd M369u9tRsxyf1o2JGDdLuIUEAMPdtozr1Y4twd4B9s+QTgrf5MLxpxl1z5LmwZ19 fhIYdt2NoRi4UBHmDob1pepWnT1kebRlIiM00LfxumvnmOsyoTpm43OB5gzPsUiu pqqVfi3SsXZDOdkR+FEZ6mLCtYFAxyE3BdBytDWuPkNdr5VBMd14GK4bsJakzJO0 DZOBA8azdaCduDFo+T8w2wP8UznMCA== =aqi+ -----END PGP SIGNATURE-----
pgp5nswp17P6t.pgp
Description: PGP signature

