[ALSA-2026:46398] Important: libreswan security update
Type:
security
Severity:
important
Release date:
2026-07-27
Description:
Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN). Security Fix(es): * librenswan: IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload (CVE-2026-50721) * librenswan: IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payload (CVE-2026-50722) * librenswan: IKEv2 Denial of Service via malformed fragmentation (CVE-2026-12413) * libreswan: badly formatted X.509 certificate can cause an assertion failure that crashes the daemon process (CVE-2026-14957) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 libreswan-minimal-5.3.2-1.el10_2.aarch64.rpm 740f1255f23fd60cbbdaa78877885811f241121e4c0431ce55b0253945c285f0
aarch64 libreswan-5.3.2-1.el10_2.aarch64.rpm e216f1807850b4cee2354d6022423fbcfa3adfe3fd6dd86b6dbb3c9cf2e17ee9
ppc64le libreswan-minimal-5.3.2-1.el10_2.ppc64le.rpm 7633e8f752e0916a0a218f637f50d91e12aa95588cea9ccc480ccafa4b6bc755
ppc64le libreswan-5.3.2-1.el10_2.ppc64le.rpm 9150010934d74f01ab23c3cbeca42f554d757a9d1d4747d715e9d43432505867
s390x libreswan-5.3.2-1.el10_2.s390x.rpm 7378a6277f4c14a6ea70b1876b6d5c46badabddb9358ef6d261734db113eb89b
s390x libreswan-minimal-5.3.2-1.el10_2.s390x.rpm e2edb37595ea0ce9ad362d34d08bc3a3da1efa9bd1efe4841320ba9ab411cec1
x86_64 libreswan-minimal-5.3.2-1.el10_2.x86_64.rpm 26ef6b7f001b74cc7f6ccdacf0d0fde7139c4108dc1f47309a7b1f74b042ba37
x86_64 libreswan-5.3.2-1.el10_2.x86_64.rpm cc5ba989c08a83cf5c519bb9d074d9817f70ad9330a922e71a7c9b35b5d4102c
x86_64_v2 libreswan-minimal-5.3.2-1.el10_2.x86_64_v2.rpm 0c321d4d6cbd639f860ff82758b76fa4212b7d0686114f23f13eba7a4db94ce8
x86_64_v2 libreswan-5.3.2-1.el10_2.x86_64_v2.rpm 1926f320d81ffefd287a82e8a9cf7ba0a49edaf3ae5dca587b9a11d6792c6513
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.