[ubuntu/resolute-proposed] strongswan 6.0.1-6ubuntu5 (Accepted)

[Marc Deslauriers]

strongswan (6.0.1-6ubuntu5) resolute; urgency=medium

  * SECURITY UPDATE: Buffer Overflow When Handling EAP-MSCHAPv2 Failure
    Requests
    - debian/patches/CVE-2025-62291.patch: fix length check for Failure
      Request packets on the client in
      src/libcharon/plugins/eap_mschapv2/eap_mschapv2.c.
    - CVE-2025-62291

Date: Tue, 21 Oct 2025 10:11:00 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/strongswan/6.0.1-6ubuntu5
-------------- next part --------------
Format: 1.8
Date: Tue, 21 Oct 2025 10:11:00 -0400
Source: strongswan
Built-For-Profiles: noudeb
Architecture: source
Version: 6.0.1-6ubuntu5
Distribution: resolute
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Changes:
 strongswan (6.0.1-6ubuntu5) resolute; urgency=medium
 .
   * SECURITY UPDATE: Buffer Overflow When Handling EAP-MSCHAPv2 Failure
     Requests
     - debian/patches/CVE-2025-62291.patch: fix length check for Failure
       Request packets on the client in
       src/libcharon/plugins/eap_mschapv2/eap_mschapv2.c.
     - CVE-2025-62291
Checksums-Sha1:
 a7ac3f40e83266625cd9acb6e07ccc43edb56b90 3465 strongswan_6.0.1-6ubuntu5.dsc
 d25492988da3f21d3a088b76edc7e9e1909d84fe 149044 strongswan_6.0.1-6ubuntu5.debian.tar.xz
 d510324cdebab7c58a8cab823cf6b8560a0a1efc 11560 strongswan_6.0.1-6ubuntu5_source.buildinfo
Checksums-Sha256:
 cd6d7cd33b939de21cae6f6bef0b90285a7a5e3943e821bb3e40f0330a3bb9da 3465 strongswan_6.0.1-6ubuntu5.dsc
 3e598989f90e497be38ad9c3b25e284e8eff95b879117e63c3c1dc1ea582b7a3 149044 strongswan_6.0.1-6ubuntu5.debian.tar.xz
 5186b7aba583a98665c4cfc846ebe2a9fc87ad656afd555e5b098d0679e67b03 11560 strongswan_6.0.1-6ubuntu5_source.buildinfo
Files:
 ebf87aae11f698003b1e4af476c08122 3465 net optional strongswan_6.0.1-6ubuntu5.dsc
 bb3d6639462a48b060c2aeb2f9ce8d21 149044 net optional strongswan_6.0.1-6ubuntu5.debian.tar.xz
 921569b2fc2c7e3301c02fb89811f8d2 11560 net optional strongswan_6.0.1-6ubuntu5_source.buildinfo
Original-Maintainer: strongSwan Maintainers <pkg-swan-devel at lists.alioth.debian.org>