#1122993 CVE-2025-9615: fix access restrictions to foreign credentials

Package:
network-manager-strongswan
Source:
network-manager-strongswan
Description:
network management framework (strongSwan plugin)
Submitter:
Harald Dunkel
Date:
2025-12-23 15:35:30 UTC
Severity:
normal
Tags:
#1122993#5
Date:
2025-12-15 17:24:22 UTC
From:
To:
Upstream provides n-m-s version 1.6.4 and patches for older versions
to fix CVE-2025-9615.

#1122993#12
Date:
2025-12-23 15:34:12 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
network-manager-strongswan, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1122993@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Harald Dunkel <harri@afaics.de> (supplier of updated network-manager-strongswan package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Wed, 17 Dec 2025 18:40:58 +0100
Source: network-manager-strongswan
Binary: network-manager-strongswan network-manager-strongswan-dbgsym
Architecture: source amd64
Version: 1.6.4-1
Distribution: unstable
Urgency: medium
Maintainer: Harald Dunkel <harri@afaics.de>
Changed-By: Harald Dunkel <harri@afaics.de>
Description:
 network-manager-strongswan - network management framework (strongSwan plugin)
Closes: 1122993
Changes:
 network-manager-strongswan (1.6.4-1) unstable; urgency=medium
 .
   * new upstream version 1.6.4, fixing CVE-2025-9615, see
https://www.strongswan.org/blog/2025/12/12/strongswan-vulnerability-(cve-2025-9615).html
     (Closes: #1122993)
Checksums-Sha1:
 ac5be4531643faeb8198041a56903c6aefdebba5 1920 network-manager-strongswan_1.6.4-1.dsc
 d2c4e663071c2fe196b4140f2bbfe75bb2557ab3 347849 network-manager-strongswan_1.6.4.orig.tar.bz2
 e45afa1fd32de781774be5211cb20670c8081eae 4532 network-manager-strongswan_1.6.4-1.debian.tar.xz
 66f8911204b08973e4bea42f3c5291925e83fe34 62480 network-manager-strongswan-dbgsym_1.6.4-1_amd64.deb
 43f3dddc3e934a8ca85b2298f17f1af64b42f96e 16104 network-manager-strongswan_1.6.4-1_amd64.buildinfo
 15fd049ec31578af79d50f37bcd3ee729d22039a 27640 network-manager-strongswan_1.6.4-1_amd64.deb
Checksums-Sha256:
 fff5410b614b9abfe74468b49fcb9c570c88a26af86343c084eb2dfc3ea83336 1920 network-manager-strongswan_1.6.4-1.dsc
 5fd7ed9e8a20c365bea7d653760a0409f9b212444006d4365332bbcc518f6c15 347849 network-manager-strongswan_1.6.4.orig.tar.bz2
 b16fd84dc51c951d8e835ee165c23ce39eb63da22ac6e0aa0dd2df2b7819d044 4532 network-manager-strongswan_1.6.4-1.debian.tar.xz
 8c1746954589c43329e24085b1fee3ad47518a4ce8ff3d5ecf8a4830919d0b7b 62480 network-manager-strongswan-dbgsym_1.6.4-1_amd64.deb
 6f1be0a1af4bd8f620204febe88146100bf4e2d48fe7cf64052332f12ddc101c 16104 network-manager-strongswan_1.6.4-1_amd64.buildinfo
 a2c2bc0d280111cb528d707cc9dacfb70644bc2670612f30deaf829a3aa01b80 27640 network-manager-strongswan_1.6.4-1_amd64.deb
Files:
 5ec4c8a2dfdd0755d280f387260ac324 1920 net optional network-manager-strongswan_1.6.4-1.dsc
 a784c4e20e5f60f57a5bd4d850cf3c10 347849 net optional network-manager-strongswan_1.6.4.orig.tar.bz2
 9ee01eefbc3e88e85f798d492caeee23 4532 net optional network-manager-strongswan_1.6.4-1.debian.tar.xz
 96307a40583f34afe17ff68aa91e5927 62480 debug optional network-manager-strongswan-dbgsym_1.6.4-1_amd64.deb
 1e5db4461001dcd8f04d4050fc5da60e 16104 net optional network-manager-strongswan_1.6.4-1_amd64.buildinfo
 d04418a454e3c0d8738c790525f3d8fd 27640 net optional network-manager-strongswan_1.6.4-1_amd64.deb
-----BEGIN PGP SIGNATURE-----

iQFEBAEBCgAuFiEEH2V614LbR/u1O+a1Cp4qnmbTgcsFAmlKsIYQHGhhcnJpQGFm
YWljcy5kZQAKCRAKniqeZtOBy8yDB/wM57OjaFYxNnOdgRhzEbJhS3DlX576pF7C
HwoD/0bN3cS8dJ5g0ZtUZpQw+AxdpzfYenBZQ8mBE3Y3LSU8Gz11YUdV0SxzWUY1
QnmM71/ZkJ6P+/X3JSTx+kGf/gO/LsFgyDrwVD4IKy9DhOnI7Lp4QR/lu7e46yx8
8677+NZbrle5AircJjnRzIgxEusaiPQyeMygMvulu+urH/iL5k9T8H5c3US4053D
sURNYrB4iV09+jeZPkmQ+ZyLsj42aIdFNlKxaVNLUylpF3NAMRa/Fxp/ft96NP2R
cc2Jl2/qg0t83ZpalrQQJbErNNaPPxnE0hMUD9rdV0oZ9+SQBEfF
=QNpE
-----END PGP SIGNATURE-----