[From nobody Sun Apr 26 10:23:07 2026 Received: (at 1134897-close) by bugs.debian.org; 26 Apr 2026 09:21:31 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.0 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED, SPF_HELO_PASS,SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 75; hammy, 150; neutral, 202; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:32792) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wGvgB-002uSh-0L for 1134897-close@bugs.debian.org; Sun, 26 Apr 2026 09:21:31 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wGvg9-00GdRn-1Z for 1134897-close@bugs.debian.org; Sun, 26 Apr 2026 09:21:29 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=7j5xGGXgyI7ipQJeHd4Dm387CyoptWUpGzT/OP5I+gg=; b=hXVNI/HYa4WFjG81d2CWVS1cDl E21wBMn+jxwpSjBcwdGz7GuttUrc/G6iEVMQwdg190r7y1pmdArC8ZArd32OnwmKmUu4HDGckJDaa 2jpXRHRYb+YrVnbBEZ1iLK8wJEGLq/jRpEmaEqgywgFMtVUG1vLLYNvkhvI4vE6rIEPmkNYoaW//D jGkGPPdfQyPGTmjaMN46rJjffwCAM1lr9llX3gPX2HqUp3LaeQAuEwgbgCtqa79PsFodW0iPASUEW AOaQw1S9dR4fbz37DgZFGdOumc0H/orYcPuW7ueb7Bgv/1JH9Mu+fQncN3GAH+y2MD0HOxA1zNAuk lQmFIrtg==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wGvg8-0000000DwzE-1DrY; Sun, 26 Apr 2026 09:21:28 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Yves-Alexis Perez <corsac@debian.org> To: 1134897-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: strongswan Debian: DAK Debian-Changes: strongswan_6.0.6-1_source.changes Debian-Source: strongswan Debian-Version: 6.0.6-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1134897: fixed in strongswan 6.0.6-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============2657542012931813742==" Message-Id: <E1wGvg8-0000000DwzE-1DrY@fasolo.debian.org> Date: Sun, 26 Apr 2026 09:21:28 +0000 --===============2657542012931813742== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: strongswan Source-Version: 6.0.6-1 Done: Yves-Alexis Perez <corsac@debian.org> We believe that the bug you reported is fixed in the latest version of strongswan, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1134897@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Yves-Alexis Perez <corsac@debian.org> (supplier of updated strongswan package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 26 Apr 2026 10:59:10 +0200 Source: strongswan Architecture: source Version: 6.0.6-1 Distribution: unstable Urgency: medium Maintainer: strongSwan Maintainers <pkg-swan-devel@lists.alioth.debian.org> Changed-By: Yves-Alexis Perez <corsac@debian.org> Closes: 1134897 Changes: strongswan (6.0.6-1) unstable; urgency=3Dmedium . * New upstream version 6.0.6 * Includes multiple security fixes (closes: #1134897): - fix for integer underflow in libsimaka when handling EAP-SIM/AKA attributes (CVE-2026-35330) - fix for integer underflow in libradius when handling RADIUS attributes (CVE-2026-35333) - fix for NULL-pointer dereference in libtls when handling ECDH public values (CVE-2026-35332) - fix for infinite loop in libtls when handling supported versions TLS extension (CVE-2026-35328) - fix for NULL-pointer dereference in libstrongswan (pkcs5) and the pkcs7 plugin when processing padding in PKCS#7 (CVE-2026-35329) - fix for acceptation of authentication certificates violating name constraints (CVE-2026-35331) - fix for possible NULL-pointer dereference in gmp plugin for RSA decryption (CVE-2026-35334) Checksums-Sha1: 4c3ce52d281604496e40ae82f9f652f0573d50ec 3179 strongswan_6.0.6-1.dsc 32845cbaa5b34768a443274832a7cdfd8f701081 4936540 strongswan_6.0.6.orig.tar.b= z2 e86b60afcd69667b3a50c01f6d1b1e74856147d0 659 strongswan_6.0.6.orig.tar.bz2.a= sc f9c979a5c4dde71abf36d5f1a440fc94ef4fb71a 128856 strongswan_6.0.6-1.debian.ta= r.xz d845a7e87be9525452545bd00e601bce5e3e3341 18226 strongswan_6.0.6-1_amd64.buil= dinfo Checksums-Sha256: e8b2caa661d729136c2e9ed17e453ae6c5d90ae8d4bbed32408ac0f97c07617a 3179 strong= swan_6.0.6-1.dsc 07df7cedae56a7f3bb07e66d21a1f9f87e961db70e99184e11d3819413e4f87c 4936540 str= ongswan_6.0.6.orig.tar.bz2 b9cc825551547263f59d5021523da48dff4224e587c821b27dd251f220a7f3b7 659 strongs= wan_6.0.6.orig.tar.bz2.asc 63cf18e049adb10cc3d477827ba2ed1d593903321fb2ca97cd2aa482045120ec 128856 stro= ngswan_6.0.6-1.debian.tar.xz e425758e0ac7322f977b339ef25b4cf8403b7b701e5e641b42d5f1bee4cd995a 18226 stron= gswan_6.0.6-1_amd64.buildinfo Files: f3e0db7ff0501fab1999891f8c687c2a 3179 net optional strongswan_6.0.6-1.dsc 9c3ad7220a08ec58dc1a367f942c9be4 4936540 net optional strongswan_6.0.6.orig.= tar.bz2 07b7e16e983e5638783d166da1f160b0 659 net optional strongswan_6.0.6.orig.tar.= bz2.asc caf1ee7fd6e41eb58b0520905f690f11 128856 net optional strongswan_6.0.6-1.debi= an.tar.xz 7620f754f8a03f42584e26ea87b00831 18226 net optional strongswan_6.0.6-1_amd64= .buildinfo -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEE8vi34Qgfo83x35gF3rYcyPpXRFsFAmnt1nUACgkQ3rYcyPpX RFtjrwf/Z5Ju+0j6CLVUEL/ZbMZX3BzWKn5yGljZChhJyBn23C+VpqFbUgvzb9hT 0zpsimiCB5hqN57r1NIck/UNL97tdXvscrKS7TX4KhlvI+LJqm/1ojPnZvBFTs6n MmQfRDNPy1z3GFn6IIaAmUGqqGlrbxhe4QI7H1AXeT7hK+JMryCHT7Yl7pc6gf9f efmqwLeNtbRpLtYmtysUj6z8Pz6vi3LRqLmUbca2sKvnn980qkJF2rg2BzsLw3Ym 2FaSJ9iOqmQTeSP18piwmV8b24MwwYXLZ63xTetMTBkiRhUfKpXjvRU7h2EYJJsJ bAgvww7zJVEkT3FfF195xuwUpq5D3Q=3D=3D =3DC9xa -----END PGP SIGNATURE----- --===============2657542012931813742== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCae3ZGAAKCRCb9qggYcy5 IenBAPwK8gnvrxfa+JK3m9YLWQzMZzWiAEBa77n1BJ6mWnBejAD/ZBDg1wIZ3hiA ioKBMxd6scK3uz3L5vK7JXRQFmtQrQQ= =6Iy6 -----END PGP SIGNATURE----- --===============2657542012931813742==-- ]