[Pkg-swan-devel] strongswan_6.1.0-1_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 07 Sep 2026 21:31:11 +0200
Source: strongswan
Architecture: source
Version: 6.1.0-1
Distribution: unstable
Urgency: medium
Maintainer: strongSwan Maintainers <pkg-swan-devel at lists.alioth.debian.org>
Changed-By: Yves-Alexis Perez <corsac at debian.org>
Changes:
 strongswan (6.1.0-1) unstable; urgency=medium
 .
   * New upstream version 6.1.0
   * Includes multiple security fixes
     - fix for undefined memory access when verifying PKCS#7 containers
     (CVE-2026-78123)
     - patch to fix memory leaks after enumerating certificates in PKCS#7
     containers (CVE-2026-78124)
     - fix NULL-pointer dereference in EAP-AKA (CVE-2026-78126)
     - avoid memory leak in IKE message logging (CVE-2026-78127)
     - fix potential DoS by validating PKCS#5 parsed parameters
     (CVE-2026-78129)
     - fix NULL-pointer dereference in x509 code (CVE-2026-78130)
     - fix memory leak when parsing x509 attribute certificates
     (CVE-2026-78131)
     - fix infinite loop when parsing x509 attribute certificates
     (CVE-2026-78132)
     - fix use-after-free in IKEv2 rekeying (CVE-2026-78133)
     - fix several issues with binding identities to the IKE SA
     (CVE-2026-78134)
     - properly reject CREATE_CHILD_SA requests on unestablished IKE_SA
     (CVE-2026-78135)
   * remove plugins obsoleted in 6.1.0
   * document IKEv1 protocol as disabled
Checksums-Sha1:
 985dea1d934a87c81b7b8bf9d4687d226ee4e24f 3171 strongswan_6.1.0-1.dsc
 ee75e312f1223817adf2afeb9e768de3cb34869f 4620545 strongswan_6.1.0.orig.tar.bz2
 94a9979d63d9da5d8a082fb30796e1a46fe3700d 659 strongswan_6.1.0.orig.tar.bz2.asc
 b2cebe89035ea8c2b31511871f0af45000e9d994 128992 strongswan_6.1.0-1.debian.tar.xz
 9a67e202efe5ad58061f431b75217c64a9e616da 17919 strongswan_6.1.0-1_amd64.buildinfo
Checksums-Sha256:
 b0f85af5d8108ae686532e3d94b429b76849bb6d5de2f4e79e7bb76d1366c166 3171 strongswan_6.1.0-1.dsc
 fe6c97481298767213cfc2e9a1da29fdd8018d481ff4cb9cf0283099654f20d4 4620545 strongswan_6.1.0.orig.tar.bz2
 0140d19de95085b58b9ecc483fc962b4b0a072d12c26b69a17df4032fae53984 659 strongswan_6.1.0.orig.tar.bz2.asc
 39842a073196798e997725a04692b80d7b39ce9420f593d446437d9591cc20c0 128992 strongswan_6.1.0-1.debian.tar.xz
 e5400be1582f226547e68db12b16126cbf4977226f39252c06f1ce9358b4b6c4 17919 strongswan_6.1.0-1_amd64.buildinfo
Files:
 10a4ff59c79ed1b94b7f4c6d634abc1b 3171 net optional strongswan_6.1.0-1.dsc
 c789d4f7389057b6c99860bf1e52ed1e 4620545 net optional strongswan_6.1.0.orig.tar.bz2
 c2624212a92b98ee24126caa329668a1 659 net optional strongswan_6.1.0.orig.tar.bz2.asc
 2b57458ba67225c6ce956f2fff0cc20c 128992 net optional strongswan_6.1.0-1.debian.tar.xz
 ef6f1bef1e77335ff541aefa6f9de29d 17919 net optional strongswan_6.1.0-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCgAdFiEE8vi34Qgfo83x35gF3rYcyPpXRFsFAmqfEr8ACgkQ3rYcyPpX
RFvRqAgAoEGrOO5rgT0DprCLczt6gP7SLsQlBj+JGFnhxK0A2p3Ua6KS1muTFOI0
GVE3cnJYNsLGjQWd3b6VadXKOUxVM5uATYiux95vSMEhEhWupXTgDamBhVgl9bnd
M369u9tRsxyf1o2JGDdLuIUEAMPdtozr1Y4twd4B9s+QTgrf5MLxpxl1z5LmwZ19
fhIYdt2NoRi4UBHmDob1pepWnT1kebRlIiM00LfxumvnmOsyoTpm43OB5gzPsUiu
pqqVfi3SsXZDOdkR+FEZ6mLCtYFAxyE3BdBytDWuPkNdr5VBMd14GK4bsJakzJO0
DZOBA8azdaCduDFo+T8w2wP8UznMCA==
=aqi+
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-swan-devel/attachments/20260907/74afa5bc/attachment.sig>