[ALSA-2026:90492] Important: libreswan security update
Type:
security
Severity:
important
Release date:
2026-10-26
Description:
Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN). Security Fix(es): * libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP (CVE-2026-94453) * libreswan: IKEv2 pre-authentication Null Pointer deref in EAP code (CVE-2026-77206) * libreswan: Null Pointer Dereference in PKCS#7 bundle with no CERTS (CVE-2026-77207) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 libreswan-4.12-2.el8_10.7.aarch64.rpm 2af759745a21f279c9bbf447556f0d3b0934d9e96ac04d6622a0f6172fcf375a
ppc64le libreswan-4.12-2.el8_10.7.ppc64le.rpm f828d6253bfc4cfaccc66fa79397f4ad6056cb1af2394d6c1e9d913565918ed3
s390x libreswan-4.12-2.el8_10.7.s390x.rpm 009142f0af21dd1aa85b37eb3a07d1a81d6b2bc1cffd041f8821004dc08b4388
x86_64 libreswan-4.12-2.el8_10.7.x86_64.rpm a55c08de3c77cce9e492b7dc605736b886e289320e93ef2599ec61cea94661f3
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.