-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 5 Dec 2011 09:24:52 +0100 Source: openswan Binary: openswan openswan-dbg openswan-doc openswan-modules-source openswan-modules-dkms Architecture: i386 Version: 1:2.6.28+dfsg-5+squeeze1 Distribution: squeeze-security Urgency: high Maintainer: i386 Build Daemon Changed-By: Harald Jenny Description: openswan - Internet Key Exchange daemon openswan-dbg - Internet Key Exchange daemon - debugging symbols openswan-doc - Internet Key Exchange daemon - documentation openswan-modules-dkms - Internet Key Exchange daemon - DKMS source openswan-modules-source - Internet Key Exchange daemon - kernel module source Closes: 650674 Changes: openswan (1:2.6.28+dfsg-5+squeeze1) stable-security; urgency=high . [Harald Jenny] * Fix pluto crypto helper handler vulnerability (CVE-2011-4073). Thanks to Paul Wouters for the patch. Closes: #650674: [CVE-2011-4073] Openswan crypto helper crasher Checksums-Sha1: 09ca8afc38b3f63b9ad69aacc1ca89db7bfc20a7 994512 openswan_2.6.28+dfsg-5+squeeze1_i386.deb 7d66dfea363f87e4f4b5fd8559400635de73b025 1092482 openswan-dbg_2.6.28+dfsg-5+squeeze1_i386.deb 36d5a4848ea7456e4faa0655c912cb3cf1953720 589494 openswan-modules-dkms_2.6.28+dfsg-5+squeeze1_i386.deb Checksums-Sha256: dec51a5f9921bc7b118316fd4e261be618ec0b80e35ca5caeaf9d3082b9b6471 994512 openswan_2.6.28+dfsg-5+squeeze1_i386.deb bcf01eeed45ba67561c5bc66c5572c8008ebb93f08c96e1158d237b07b4d8549 1092482 openswan-dbg_2.6.28+dfsg-5+squeeze1_i386.deb 66d4f9313256bdee50ed0398be92c0f348462e3499cd2fb1c579e34a9c3a6af5 589494 openswan-modules-dkms_2.6.28+dfsg-5+squeeze1_i386.deb Files: 8b9c51a6cc8ab5c6862d7e656c747cfc 994512 net optional openswan_2.6.28+dfsg-5+squeeze1_i386.deb ed8cc4ee77f56054539fbbdddaf7a07f 1092482 debug extra openswan-dbg_2.6.28+dfsg-5+squeeze1_i386.deb 280c9bd7cecdf79bf906d6c4ff140985 589494 kernel optional openswan-modules-dkms_2.6.28+dfsg-5+squeeze1_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJO9hCXAAoJECkckSfIPUEsRk8P/jLea8SvSQM4T1TVdtxIMr2J 6pi9cpptKl9ab3+VSq7VrE0amIzNFS56LGNkTYtq3c7MxSGxmQpe7lbj8ADizrFO vV2BF6HR0OF7evrIzzfsCKUbUNvo7Ur4VIUqc6MxbwakGQLp4EhPp9Bm2n8uJZEw Z26YR07iAh6kjGajWtK8LCJ6yWNQZpP1MqYzXwf6dIsrAyHTRbB1jxSfSPnnxMv4 bLIRkdtTJYBwiQVXrcHmet8J56EQ1wby7BB70ReCbuZgnNkl2gtRZMsAkSKC86Br sckgRPzpxxKKmtCmgj8VSoWYwsrXux/LgAF0Ettgzepzyo/OeNESqH/6pWI4iaUl moLkahUllPEFT2s1t/CdpDUu+EA06cJomvwODUR67UiEJUp6MF+IEUMV16x5ejw9 tosdpuy2kCWCzVERtkbM5iaxsh/mW2bd1FvzXa7x7aDW2BgH1QQns9sQRXABYjsq sn/GvQZtQ51LFUz1uwSd79aiGIrbWJ4SaaP5YAH8oFBFLrr3fQWE8i96CzNBorvZ YrrREgXdR6H1DY9DXoQ2XWGUkrqBj9BjablWFZQSq4kLPncNoj8I3ro4jH2+qF02 ukuCQoZm6QTbL5fhmmxIaPpW4Xmk36/lPUii2Yg7kRE5mzD3O2zvVwKxi+UMuGyr 0eYzmls3LQyixotIzdRP =xEea -----END PGP SIGNATURE-----