HighFix available
Red Hat Security Advisory: libreswan security update
Type: advisorySources: OSV
- Products
- libreswan, libreswan-debuginfo, libreswan-debugsource
- Affected versions
- Not specified
- Fixed versions
- 0:4.12-2.el8_10.6
- CVEs
- CVE-2026-12413, CVE-2026-14957, CVE-2026-50721, CVE-2026-50722
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 09:12 UTC · Revision 1
Source evidence
Red Hat Security Advisory: libreswan security update
core-osv · Original sourcePublished 28 Jul 2026, 10:13 UTC
Red Hat Security Advisory: libreswan security update
osv:RHSA-2026:46396
libreswan
Fixed versions: 0:4.12-2.el8_10.6
libreswan-debuginfo
Fixed versions: 0:4.12-2.el8_10.6
libreswan-debugsource
Fixed versions: 0:4.12-2.el8_10.6
Complete source record
{
"id": "537a89513d85b4c4b749007e11f0b28133591d7633c3f47c5bbc0945e0ecea65",
"url": "https://osv.dev/vulnerability/RHSA-2026%3A46396",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Red Hat Security Advisory: libreswan security update",
"summary": "Red Hat Security Advisory: libreswan security update",
"evidence": "osv:RHSA-2026:46396",
"products": [
{
"name": {
"value": "libreswan",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.12-2.el8_10.6",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libreswan-debuginfo",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.12-2.el8_10.6",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libreswan-debugsource",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.12-2.el8_10.6",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
}
],
"severity": "high",
"structured": {
"id": "RHSA-2026:46396",
"aliases": [
"RHSA-2026:46396"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.12-2.el8_10.6"
}
]
}
],
"package": {
"name": "libreswan",
"purl": "pkg:rpm/redhat/libreswan",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:46396.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.12-2.el8_10.6"
}
]
}
],
"package": {
"name": "libreswan-debuginfo",
"purl": "pkg:rpm/redhat/libreswan-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:46396.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.12-2.el8_10.6"
}
]
}
],
"package": {
"name": "libreswan-debugsource",
"purl": "pkg:rpm/redhat/libreswan-debugsource",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:46396.json"
}
}
],
"modified": "2026-10-20T10:09:39Z",
"provider": "osv",
"upstream": [
"CVE-2026-12413",
"CVE-2026-14957",
"CVE-2026-50721",
"CVE-2026-50722"
],
"references": [
"https://access.redhat.com/errata/RHSA-2026:46396",
"https://access.redhat.com/security/updates/classification/#important",
"https://bugzilla.redhat.com/show_bug.cgi?id=2494147",
"https://bugzilla.redhat.com/show_bug.cgi?id=2494148",
"https://bugzilla.redhat.com/show_bug.cgi?id=2494149",
"https://bugzilla.redhat.com/show_bug.cgi?id=2501764",
"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_46396.json",
"https://access.redhat.com/security/cve/CVE-2026-12413",
"https://www.cve.org/CVERecord?id=CVE-2026-12413",
"https://nvd.nist.gov/vuln/detail/CVE-2026-12413",
"https://libreswan.org/security/CVE-2026-12413/",
"https://libreswan.org/security/CVE-2026-12413/CVE-2026-12413.txt",
"https://lists.libreswan.org/archives/list/swan-announce@lists.libreswan.org/thread/7BZBYREBGXFPS4TSWOZX37WABRZVLK74/",
"https://access.redhat.com/security/cve/CVE-2026-14957",
"https://www.cve.org/CVERecord?id=CVE-2026-14957",
"https://nvd.nist.gov/vuln/detail/CVE-2026-14957",
"https://libreswan.org/security/CVE-2026-14957/",
"https://libreswan.org/security/CVE-2026-14957/CVE-2026-14957.txt",
"https://access.redhat.com/security/cve/CVE-2026-50721",
"https://www.cve.org/CVERecord?id=CVE-2026-50721",
"https://nvd.nist.gov/vuln/detail/CVE-2026-50721",
"https://libreswan.org/security/CVE-2026-50721/",
"https://libreswan.org/security/CVE-2026-50721/CVE-2026-50721.txt",
"https://access.redhat.com/security/cve/CVE-2026-50722",
"https://www.cve.org/CVERecord?id=CVE-2026-50722",
"https://nvd.nist.gov/vuln/detail/CVE-2026-50722",
"https://libreswan.org/security/CVE-2026-50722",
"https://libreswan.org/security/CVE-2026-50722/",
"https://libreswan.org/security/CVE-2026-50722/CVE-2026-50722.txt"
]
},
"related_cves": [
{
"value": "CVE-2026-12413",
"evidence": "/upstream"
},
{
"value": "CVE-2026-14957",
"evidence": "/upstream"
},
{
"value": "CVE-2026-50721",
"evidence": "/upstream"
},
{
"value": "CVE-2026-50722",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 378401,
"published_at": "2026-07-28T10:13:47+00:00"
}