Format: 1.8
Date: Thu, 06 Aug 2026 16:04:55 +0300
Source: libreswan
Architecture: source
Version: 5.2-2.5
Distribution: unstable
Urgency: medium
Maintainer: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
Changed-By: Adrian Bunk <bunk@debian.org>
Closes: 1133535 1141390 1143067
Changes:
 libreswan (5.2-2.5) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Backport upstream fix for FTBFS with GCC 16. (Closes: #1133535)
   * CVE-2026-50721: IKEv1 Denial of Service via RSA-SHA1
     authentication payload
   * CVE-2026-50722: IKEv2 Denial of Service via RSA-SHA1
     authentication payload
   * CVE-2026-12413: IKEv2 Denial of Service via malformed fragmentation
   * (Closes: #1141390)
   * CVE-2026-14957: FIPS mode reachable assertion (Closes: #1143067)
Checksums-Sha1:
 084a62211c96f02316cc00f5b6d190d1018b2ebb 2640 libreswan_5.2-2.5.dsc
 0721c3a88f316023bbe7308c4d88e16509355a05 19076 libreswan_5.2-2.5.debian.tar.xz
Checksums-Sha256:
 0dce4f1152426e3e7c0a6fb73286e53c118e90db49fd8ba321eebce9baccd6b5 2640 libreswan_5.2-2.5.dsc
 69c644a8530d5cd396496688b7347b0c7333d7a8d0baff072cb3990a4a0cc84f 19076 libreswan_5.2-2.5.debian.tar.xz
Files:
 3e1728206c72c7f9cea54de57515eda9 2640 net optional libreswan_5.2-2.5.dsc
 eeb668a51210b152929a779d071ed29f 19076 net optional libreswan_5.2-2.5.debian.tar.xz
Location: DEFERRED
Delayed-Until: 2026-08-08 22:22:56
Delay-Remaining: 1 days 22:26
Fingerprint: 3AFA757FAC6EA11D2FF45DF088D24287A2D898B1