[ALSA-2026:89748] Important: libreswan security update
Type:
security
Severity:
important
Release date:
2026-10-26
Description:
Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN). Security Fix(es): * libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP (CVE-2026-94453) * libreswan: IKEv2 pre-authentication Null Pointer deref in EAP code (CVE-2026-77206) * libreswan: Null Pointer Dereference in PKCS#7 bundle with no CERTS (CVE-2026-77207) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 libreswan-4.15-11.el9_8.aarch64.rpm d351306bdb4a1cbb2e1164875bed405f40e6c8a38a65331ce2ee50e2e8991ac3
ppc64le libreswan-4.15-11.el9_8.ppc64le.rpm 570a48f181a76395b8dd6c0731a2405671075b156971fe63a454eb3c55c664d9
s390x libreswan-4.15-11.el9_8.s390x.rpm a7b5b6fabe7c93b9934548cbbb4d77c4710a47bc65aaf78f35f99d05f6237183
x86_64 libreswan-4.15-11.el9_8.x86_64.rpm eceee4151791df0c86dc5bf1156335a8f8e023c34a8ac972c3c2049353cc92ef
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.