Skip to content
Heist/ feed
UnratedFix available

Security update for strongswan

Type: advisorySource: OSV1 source record

This update for strongswan fixes the following issues: - CVE-2026-78123: Undefined Memory Access When Handling PKCS#7 Containers (bsc#1276533). - CVE-2026-78124: Memory Leak When Processing Certificates in PKCS#7 Containers (bsc#1276534). - CVE-2026-78126: NULL-Pointer Dereference When Handling AKA-Synchronization-Failure (bsc#1276536). - CVE-2026-78127: Memory Leak During Message Stringification (bsc#1276539). - CVE-2026-78129: Unbounded Iteration When Decrypting PKCS#7 Containers (bsc#1276540). - CVE-2026-78130: NULL-Pointer Dereference in Attribute Certificate Validation (bsc#1276541). - CVE-2026-78131: Memory Leaks When Parsing Attribute Certificates (bsc#1276543). - CVE-2026-78132: Infinite Loop When Parsing Attribute Certificates (bsc#1276544). - CVE-2026-78134: Missing Inner EAP Method Authentication Details (bsc#1276548).

Announced Source revision 1
Original source ↗

SUSE-SU-2026:4143-1

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:SUSE-SU-2026:4143-1

strongswan

Source reference: /affected/0/package/name

Affected versions
Not stated in this record
Fixed versions
5.9.12-150600.3.23.2

Source reference: /affected/0/ranges

Prerequisites
Not stated in this record

strongswan

Source reference: /affected/1/package/name

Affected versions
Not stated in this record
Fixed versions
5.9.12-150600.3.23.2

Source reference: /affected/1/ranges

Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "5.9.12-150600.3.23.2"
          }
        ]
      }
    ],
    "package": {
      "name": "strongswan",
      "purl": "pkg:rpm/suse/strongswan&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSS",
      "ecosystem": "SUSE:Linux Enterprise Server 15 SP6-LTSS"
    },
    "database_specific": {
      "source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4143-1.json"
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "strongswan": "5.9.12-150600.3.23.2",
          "strongswan-doc": "5.9.12-150600.3.23.2",
          "strongswan-hmac": "5.9.12-150600.3.23.2",
          "strongswan-ipsec": "5.9.12-150600.3.23.2",
          "strongswan-libs0": "5.9.12-150600.3.23.2"
        }
      ]
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "5.9.12-150600.3.23.2"
          }
        ]
      }
    ],
    "package": {
      "name": "strongswan",
      "purl": "pkg:rpm/suse/strongswan&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP6",
      "ecosystem": "SUSE:Linux Enterprise Server for SAP Applications 15 SP6"
    },
    "database_specific": {
      "source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4143-1.json"
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "strongswan": "5.9.12-150600.3.23.2",
          "strongswan-doc": "5.9.12-150600.3.23.2",
          "strongswan-hmac": "5.9.12-150600.3.23.2",
          "strongswan-ipsec": "5.9.12-150600.3.23.2",
          "strongswan-libs0": "5.9.12-150600.3.23.2"
        }
      ]
    }
  }
]

Publisher severity

No explicit severity was provided.

Event
#23490 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement