Red Hat Security Advisory: libreswan security update

Fixed packages 4

Vulnerabilities 3

• High 7.5
  CVE-2026-77206

  IKEv2 pre-authentication Null Pointer Dereference in EAP code

  Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2 connection, even if EAP is not configured …

  The Libreswan Project libreswan libreswan libreswan Debian Ubuntu Azure Linux Alpine
  Oct 13, 2026
• High 7.5
  CVE-2026-77207

  Null Pointer Dereference in PKCS#7 bundle with no certificates

  Libreswan has a null pointer dereference bug in the PKCS#7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERT_PKCS7_WRAPPED_X509, it guards the PKCS#7 blob with SEC_PKCS7ContainsCertsOrCrls() and then ite…

  The Libreswan Project libreswan libreswan libreswan Debian Azure Linux Alpine
  Oct 13, 2026
• High 7.5
  CVE-2026-94453

  IKEv2 Use-After-Free bug when using IKE-over-TCP

  Libreswan's pluto daemon has a use-after-free vulnerability when a client connecting using IKE over TCP closes the connection and another packet (retransmit or malicious) is received for the same tuple. IKE state is retained in memory after the client closes …

  The Libreswan Project libreswan libreswan libreswan Debian Ubuntu Azure Linux Alpine
  Oct 13, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2550254
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2550256
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2550258
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_98088.json
• report
  https://access.redhat.com/security/cve/CVE-2026-77206
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-77206
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-77206
• article
  https://libreswan.org/security/CVE-2026-77206/CVE-2026-77206.txt
• article
  https://libreswan.org/security/CVE-2026-77206/libreswan-5.3-CVE-2026-77206.patch
• article
  https://libreswan.org/security/CVE-2026-77206/libreswan-5.4-CVE-2026-77206.patch
• report
  https://access.redhat.com/security/cve/CVE-2026-77207
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-77207
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-77207
• article
  https://libreswan.org/security/CVE-2026-77207/CVE-2026-77207.txt
• article
  https://libreswan.org/security/CVE-2026-77207/libreswan-5.3-CVE-2026-77207.patch
• article
  https://libreswan.org/security/CVE-2026-77207/libreswan-5.4-CVE-2026-77207.patch
• report
  https://access.redhat.com/security/cve/CVE-2026-94453
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-94453
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-94453
• article
  https://libreswan.org/security/CVE-2026-94453/CVE-2026-94453.txt
• article
  https://libreswan.org/security/CVE-2026-94453/libreswan-5.3-CVE-2026-94453.patch
• article
  https://libreswan.org/security/CVE-2026-94453/libreswan-5.4-CVE-2026-94453.patch