UbuntuUpdates.org

Bugs fixes in "strongswan"

Origin Bug number Title Date fixed
CVE CVE-2026-78127 libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser. 2026-09-21
CVE CVE-2026-78126 strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin. 2026-09-21
CVE CVE-2026-78124 strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effect 2026-09-21
CVE CVE-2026-78123 strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS#7 parsing in the openssl plugin. 2026-09-21
CVE CVE-2026-35334 strongswan: gmp plugin crash 2026-04-27
CVE CVE-2026-35333 strongswan: libradius infinite loop 2026-04-27
CVE CVE-2026-35332 strongswan: libtls ECDH crash 2026-04-27
CVE CVE-2026-35331 strongswan: constraints plugin 2026-04-27
CVE CVE-2026-35330 strongswan: libsimaka infinite loop 2026-04-27
CVE CVE-2026-35329 strongswan: pkcs7 crash 2026-04-27
CVE CVE-2026-35328 strongswan: libtls infinite loop 2026-04-27
CVE CVE-2026-35334 strongswan: gmp plugin crash 2026-04-27
CVE CVE-2026-35333 strongswan: libradius infinite loop 2026-04-27
CVE CVE-2026-35332 strongswan: libtls ECDH crash 2026-04-27
CVE CVE-2026-35331 strongswan: constraints plugin 2026-04-27
CVE CVE-2026-35330 strongswan: libsimaka infinite loop 2026-04-27
CVE CVE-2026-35329 strongswan: pkcs7 crash 2026-04-27
CVE CVE-2026-35328 strongswan: libtls infinite loop 2026-04-27
CVE CVE-2026-35334 strongswan: gmp plugin crash 2026-04-27
CVE CVE-2026-35333 strongswan: libradius infinite loop 2026-04-27



About   -   Send Feedback to @ubuntu_updates