DSA-6487-1 strongswan — atualização de segurança

A Debian publicou o aviso de segurança DSA-6487-1 para o pacote strongswan, referente à distribuição trixie, com data de anúncio em 7 de setembro de 2026. A versão corrigida para essa distribuição é a 6.0.1-6+deb13u7.

Vulnerabilidades corrigidas

  • CVE-2026-78123
  • CVE-2026-78124
  • CVE-2026-78126
  • CVE-2026-78127
  • CVE-2026-78129
  • CVE-2026-78130
  • CVE-2026-78131
  • CVE-2026-78132
  • CVE-2026-78133
  • CVE-2026-78134
  • CVE-2026-78135

Referências

Dados estruturados do aviso

{
"project": "debian",
"event": "security",
"identifier": "DSA-6487-1",
"version": null,
"announcementDate": "2026-09-07 00:00:00+00",
"officialSource": "https://lists.debian.org/debian-security-announce/2026/msg00398.html",
"cves": [
"CVE-2026-78123",
"CVE-2026-78124",
"CVE-2026-78126",
"CVE-2026-78127",
"CVE-2026-78129",
"CVE-2026-78130",
"CVE-2026-78131",
"CVE-2026-78132",
"CVE-2026-78133",
"CVE-2026-78134",
"CVE-2026-78135"
],
"fixedPackages": [
{
"package": "strongswan",
"release": "trixie",
"version": "6.0.1-6+deb13u7"
}
],
"trackerUrl": "https://security-tracker.debian.org/tracker/DSA-6487-1",
"editorialLimits": "Use only these verified fields. No inferred features, upgrade commands, affected-version ranges or support deadlines. A release announcement does not establish distribution package availability. For security fixes preserve the exact distribution, package version and Pro/ESM access requirements; CVEs do not imply every listed release is affected by every issue."
}