Bugs fixes in "strongswan"
| Origin | Bug number | Title | Date fixed |
|---|---|---|---|
| CVE | CVE-2026-78135 | libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATE_CHILD_SA requests are mishandle | 2026-09-21 |
| CVE | CVE-2026-78134 | strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner E | 2026-09-21 |
| CVE | CVE-2026-78132 | strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax. | 2026-09-21 |
| CVE | CVE-2026-78131 | strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser. | 2026-09-21 |
| CVE | CVE-2026-78130 | strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser. | 2026-09-21 |
| CVE | CVE-2026-78129 | strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption. | 2026-09-21 |
| CVE | CVE-2026-78127 | libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser. | 2026-09-21 |
| CVE | CVE-2026-78126 | strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin. | 2026-09-21 |
| CVE | CVE-2026-78124 | strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effect | 2026-09-21 |
| CVE | CVE-2026-78123 | strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS#7 parsing in the openssl plugin. | 2026-09-21 |
| CVE | CVE-2026-78135 | libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATE_CHILD_SA requests are mishandle | 2026-09-21 |
| CVE | CVE-2026-78134 | strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner E | 2026-09-21 |
| CVE | CVE-2026-78132 | strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax. | 2026-09-21 |
| CVE | CVE-2026-78131 | strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser. | 2026-09-21 |
| CVE | CVE-2026-78130 | strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser. | 2026-09-21 |
| CVE | CVE-2026-78129 | strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption. | 2026-09-21 |
| CVE | CVE-2026-78127 | libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser. | 2026-09-21 |
| CVE | CVE-2026-78126 | strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin. | 2026-09-21 |
| CVE | CVE-2026-78124 | strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effect | 2026-09-21 |
| CVE | CVE-2026-78123 | strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS#7 parsing in the openssl plugin. | 2026-09-21 |
About
-
Send Feedback to @ubuntu_updates
