[ALSA-2026:89923] Important: libreswan security update
Type:
security
Severity:
important
Release date:
2026-10-26
Description:
Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN). Security Fix(es): * libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP (CVE-2026-94453) * libreswan: Denial of Service via sending bogus X.509 certificates (CVE-2026-77205) * libreswan: Null Pointer Dereference in PKCS#7 bundle with no CERTS (CVE-2026-77207) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 libreswan-minimal-5.3.3-1.el10_2.aarch64.rpm a94ba7e9d97ef64484de570ffe9db9285daaf8646d618d66f02e574d396ddfc9
aarch64 libreswan-5.3.3-1.el10_2.aarch64.rpm abad0b9a73fb4b63f19876e7ac5ec54d81da988aec2d5cc76dbf319824909b04
ppc64le libreswan-minimal-5.3.3-1.el10_2.ppc64le.rpm 42fd7adc63c7c72f8a8ec09b70400324e358f4b61bb2cd108cc165f947b93163
ppc64le libreswan-5.3.3-1.el10_2.ppc64le.rpm d184475aa0c36c22d7d298aa1a352e8edc1e1d31fc9d8393ba2ceda4ba56aa05
s390x libreswan-minimal-5.3.3-1.el10_2.s390x.rpm 079bbc042f3cc92f983cad0a86f916b138c0ed8339504fcf089b37f3529c6e11
s390x libreswan-5.3.3-1.el10_2.s390x.rpm 7f55ef78c68d73f93f2779b3e76a05a199aafe0782c48782a33ae5b93af32442
x86_64 libreswan-5.3.3-1.el10_2.x86_64.rpm 1dc6e1afca00a3d0db0770d3e82db12ccce003859aaa10a2246952d6c82a6984
x86_64 libreswan-minimal-5.3.3-1.el10_2.x86_64.rpm 4f9c7473ad08cb6a5feb97a550da74779b66afb9b834142295214fd62a1d627d
x86_64_v2 libreswan-minimal-5.3.3-1.el10_2.x86_64_v2.rpm 20c7f58193acd1078ec2e63193878768c1d4f4ad4d35deef6e8c367569a824cd
x86_64_v2 libreswan-5.3.3-1.el10_2.x86_64_v2.rpm 60f2841e75ee876cea663b7a932c23922fbb26556bd284c1755f9fe17b9aedf8
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.