{"id":"CVE-2026-35331","aliases":["DEBIAN-CVE-2026-35331","MGASA-2026-0490","SUSE-SU-2026:1637-1","SUSE-SU-2026:1762-1","SUSE-SU-2026:21547-1","SUSE-SU-2026:2368-1","SUSE-SU-2026:2459-1","UBUNTU-CVE-2026-35331","USN-8196-1","openSUSE-SU-2026:20678-1"],"status":"published","title":"Updated strongswan packages fix security vulnerabilities","description":"Please see the links for aditional information about the\nvulnerabilities.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-04-22T12:00:00Z","modified":"2026-10-12T19:00:44Z","fixes":[{"ecosystem":"Debian:12","package":"strongswan","fixed_in":["5.9.8-5+deb12u4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"strongswan","fixed_in":["6.0.1-6+deb13u5"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"strongswan","fixed_in":["6.0.6-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"strongswan","fixed_in":["5.9.5-2ubuntu2.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"strongswan","fixed_in":["5.9.5-2ubuntu2.6+Fips1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"strongswan","fixed_in":["5.9.13-2ubuntu4.24.04.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"strongswan","fixed_in":["6.0.1-6ubuntu4.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"strongswan","fixed_in":["6.0.4-1ubuntu3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.8-5+deb12u4"}]}],"versions":["5.9.8-5","5.9.8-5+deb12u1","5.9.8-5+deb12u2","5.9.8-5+deb12u3"]},{"source":"osv","ecosystem":"Debian:13","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.1-6+deb13u5"}]}],"versions":["6.0.1-6","6.0.1-6+deb13u1","6.0.1-6+deb13u2","6.0.1-6+deb13u4"]},{"source":"osv","ecosystem":"Debian:14","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.6-1"}]}],"versions":["6.0.1-6","6.0.2-1","6.0.3-1","6.0.4-1","6.0.5-1"]},{"source":"osv","ecosystem":"Mageia:10","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.0-1.mga10"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.11-150400.19.35.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.11-150400.19.35.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.11-150400.19.35.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.11-150400.19.35.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.11-150500.5.23.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.11-150500.5.23.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.11-150500.5.23.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.11-150500.5.23.2"}]}],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.6.4-9","5.1.0-2","5.1.0-3","5.1.1-0ubuntu1","5.1.1-0ubuntu2","5.1.1-0ubuntu3","5.1.1-0ubuntu4","5.1.1-0ubuntu5","5.1.1-0ubuntu7","5.1.1-0ubuntu14","5.1.1-0ubuntu17","5.1.2~dr3+git20130120-0ubuntu2","5.1.2~dr3+git20130120-0ubuntu3","5.1.2~rc1-0ubuntu3","5.1.2~rc1-0ubuntu4","5.1.2~rc2-0ubuntu2","5.1.2-0ubuntu1","5.1.2-0ubuntu2","5.1.2-0ubuntu2.2","5.1.2-0ubuntu2.3","5.1.2-0ubuntu2.4","5.1.2-0ubuntu2.5","5.1.2-0ubuntu2.6","5.1.2-0ubuntu2.7","5.1.2-0ubuntu2.8","5.1.2-0ubuntu2.10","5.1.2-0ubuntu2.11","5.1.2-0ubuntu2.11+esm1","5.1.2-0ubuntu2.11+esm2","5.1.2-0ubuntu2.11+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.2-0ubuntu6","5.1.2-0ubuntu7","5.1.2-0ubuntu8","5.3.5-1ubuntu1","5.3.5-1ubuntu2","5.3.5-1ubuntu3","5.3.5-1ubuntu3.1","5.3.5-1ubuntu3.2","5.3.5-1ubuntu3.3","5.3.5-1ubuntu3.4","5.3.5-1ubuntu3.5","5.3.5-1ubuntu3.7","5.3.5-1ubuntu3.8","5.3.5-1ubuntu3.8+esm1","5.3.5-1ubuntu3.8+esm2","5.3.5-1ubuntu3.8+esm3","5.3.5-1ubuntu3.8+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:16.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.5-1ubuntu3.fips.3.4.1","5.3.5-1ubuntu3.fips.3.4.2","5.3.5-1ubuntu3.fips.3.8.1","5.3.5-1ubuntu3.fips.3.8.2","5.3.5-1ubuntu3.fips.3.8.3","5.3.5-1ubuntu3.fips.3.8.6","5.3.5-1ubuntu3.fips.3.8.7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:16.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.5-1ubuntu3.fips.3.1","5.3.5-1ubuntu3.fips.3.2","5.3.5-1ubuntu3.fips.3.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.5.1-4ubuntu2","5.5.1-4ubuntu3","5.6.1-2ubuntu1","5.6.1-2ubuntu2","5.6.1-2ubuntu3","5.6.1-2ubuntu4","5.6.2-1ubuntu2","5.6.2-1ubuntu2.2","5.6.2-1ubuntu2.3","5.6.2-1ubuntu2.4","5.6.2-1ubuntu2.5","5.6.2-1ubuntu2.6","5.6.2-1ubuntu2.7","5.6.2-1ubuntu2.8","5.6.2-1ubuntu2.9","5.6.2-1ubuntu2.9+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:18.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.2-1ubuntu2.fips.2.5.1","5.6.2-1ubuntu2.fips.2.7.1","5.6.2-1ubuntu2.fips.2.7.2","5.6.2-1ubuntu2.fips.2.8.1","5.6.2-1ubuntu2.fips.2.9","5.6.2-1ubuntu2.fips.2.9+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:18.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.2-1ubuntu2.fips.2.4.2","5.6.2-1ubuntu2.fips.2.5.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.7.2-1ubuntu3","5.8.1-1ubuntu1","5.8.2-1ubuntu1","5.8.2-1ubuntu2","5.8.2-1ubuntu3","5.8.2-1ubuntu3.1","5.8.2-1ubuntu3.2","5.8.2-1ubuntu3.3","5.8.2-1ubuntu3.4","5.8.2-1ubuntu3.5","5.8.2-1ubuntu3.6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.2-1ubuntu3.fips.3.1.2","5.8.2-1ubuntu3.fips.3.3.1","5.8.2-1ubuntu3.fips.3.4.1","5.8.2-1ubuntu3.fips.3.5","5.8.2-1ubuntu3.fips.3.6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:20.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.2-1ubuntu3.fips.3.1.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.5-2ubuntu2.6"}]}],"versions":["5.9.1-1ubuntu3","5.9.1-1ubuntu3.1","5.9.4-1ubuntu1","5.9.4-1ubuntu2","5.9.4-1ubuntu3","5.9.4-1ubuntu4","5.9.5-2ubuntu1","5.9.5-2ubuntu2","5.9.5-2ubuntu2.1","5.9.5-2ubuntu2.2","5.9.5-2ubuntu2.3","5.9.5-2ubuntu2.4","5.9.5-2ubuntu2.5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-preview:22.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.9.5-2ubuntu2.1+Fips1","5.9.5-2ubuntu2.2+Fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.5-2ubuntu2.6+Fips1"}]}],"versions":["5.9.5-2ubuntu2.1+Fips1","5.9.5-2ubuntu2.2+Fips1","5.9.5-2ubuntu2.3+Fips1","5.9.5-2ubuntu2.4+Fips1","5.9.5-2ubuntu2.5+Fips1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.13-2ubuntu4.24.04.3"}]}],"versions":["5.9.11-1ubuntu1","5.9.11-1ubuntu2","5.9.12-1ubuntu1","5.9.13-2ubuntu1","5.9.13-2ubuntu3","5.9.13-2ubuntu4","5.9.13-2ubuntu4.24.04.1","5.9.13-2ubuntu4.24.04.2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.1-6ubuntu4.3"}]}],"versions":["5.9.13-2ubuntu4","5.9.13-2ubuntu5","6.0.1-6ubuntu2","6.0.1-6ubuntu4","6.0.1-6ubuntu4.1","6.0.1-6ubuntu4.2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.4-1ubuntu3"}]}],"versions":["6.0.1-6ubuntu4","6.0.1-6ubuntu5","6.0.4-1ubuntu1","6.0.4-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.5-2ubuntu2.6"}]}],"versions":["5.9.1-1ubuntu3","5.9.1-1ubuntu3.1","5.9.4-1ubuntu1","5.9.4-1ubuntu2","5.9.4-1ubuntu3","5.9.4-1ubuntu4","5.9.5-2ubuntu1","5.9.5-2ubuntu2","5.9.5-2ubuntu2.1","5.9.5-2ubuntu2.2","5.9.5-2ubuntu2.3","5.9.5-2ubuntu2.4","5.9.5-2ubuntu2.5"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.13-2ubuntu4.24.04.3"}]}],"versions":["5.9.11-1ubuntu1","5.9.11-1ubuntu2","5.9.12-1ubuntu1","5.9.13-2ubuntu1","5.9.13-2ubuntu3","5.9.13-2ubuntu4","5.9.13-2ubuntu4.24.04.1","5.9.13-2ubuntu4.24.04.2"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"strongswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.1-6ubuntu4.3"}]}],"versions":["5.9.13-2ubuntu4","5.9.13-2ubuntu5","6.0.1-6ubuntu2","6.0.1-6ubuntu4","6.0.1-6ubuntu4.1","6.0.1-6ubuntu4.2"],"bundled":7}],"references":[{"url":"https://security-tracker.debian.org/tracker/CVE-2026-35331","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0490.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35413","tags":["report"]},{"url":"https://lists.debian.org/debian-security-announce/2026/msg00137.html","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-8407-1","tags":["advisory"]},{"url":"https://www.strongswan.org/blog/2026/06/08/strongswan-vulnerability-(cve-2026-47895).html","tags":["web"]},{"url":"https://lists.debian.org/debian-security-announce/2026/msg00246.html","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/72R2725DIUVMEB7TOVID7XNHTPDC3UIH/","tags":["web"]},{"url":"https://lists.debian.org/debian-security-announce/2026/msg00398.html","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-8789-1","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261637-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1261705","tags":["report"]},{"url":"https://bugzilla.suse.com/1261706","tags":["report"]},{"url":"https://bugzilla.suse.com/1261708","tags":["report"]},{"url":"https://bugzilla.suse.com/1261712","tags":["report"]},{"url":"https://bugzilla.suse.com/1261717","tags":["report"]},{"url":"https://bugzilla.suse.com/1261718","tags":["report"]},{"url":"https://bugzilla.suse.com/1261720","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35328","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35331","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35333","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35334","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261762-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621547-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262368-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1266360","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47895","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262459-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-35331","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-35331","tags":["report"]},{"url":"https://strongswan.org/blog/2026/04/22/strongswan-vulnerability-(cve-2026-35331).html","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8196-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8196-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-35328","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-35329","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-35330","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-35332","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-35333","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-35334","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"osv":[{"id":"DEBIAN-CVE-2026-35331","status":"published","published":"2026-04-22T16:31:07.645569Z","modified":"2026-09-01T15:06:02.051959199Z","updated_at":"2026-11-02T15:45:54.587575Z"},{"id":"MGASA-2026-0490","title":"Updated strongswan packages fix security vulnerabilities","description":"Please see the links for aditional information about the\nvulnerabilities.\n","status":"published","published":"2026-10-12T18:47:12Z","modified":"2026-10-12T19:00:44.442913054Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:20678-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\nUpdate to version 6.0.6 (jsc#PED-16145).\n\nSecurity issued fixed:\n\n- CVE-2026-35328: infinite loop when handling supported versions TLS extension (bsc#1261712).\n- CVE-2026-35329: NULL pointer dereference when processing padding in PKCS#7 (bsc#1261717).\n- CVE-2026-35330: integer underflow when handling EAP-SIM/AKA attributes (bsc#1261705).\n- CVE-2026-35331: acceptance of certificates violating X.509 name constraints (bsc#1261718).\n- CVE-2026-35332: NULL pointer dereference when handling ECDH public value in TLS (bsc#1261708).\n- CVE-2026-35333: integer underflow when handling RADIUS attributes (bsc#1261706).\n- CVE-2026-35334: possible NULL pointer dereference in RSA decryption (bsc#1261720).\n\nOther updates and bugfixes:\n\n- Version 6.0.6.\n  * Enhancements and Optimizations\n    * Added the unique ID to the log messages when creating an IKE SA as responder and when deleting such a half-open\n      SA\n    * The credential factory now enforces an upper limit of 10 when creating nested credentials.\n    * Added Georgian translation to the NM plugin.\n  * Fixes\n    * IKEv2 fragments with a total fragment count lower than before are now dropped as mandated by the RFC .\n    * Fixed a potential out-of-bounds read when parsing EAP-SIM/AKA attributes with actual length field.\n    * Fixed a potential out-of-bounds read when enumerating hashes in OCSP CERTREQ payloads .\n    * Fixed a potential crash in the vici plugin when parsing messages that encode the length of a VICI_LIST_ITEM\n      incorrectly.\n    * Avoid allocating a large buffer for TLS cipher suites on the stack using alloca().\n    * Ensure TLS 1.3 CertificateRequest structures are valid on the client.\n    * Prevent an infinite loop if the EAP-SIM version list on the client contains more than one entry .\n    * Fixed a crash in the tnccs_11 plugin if TNCCS-ReasonStrings is empty or only contains empty nodes .\n    * Fixed verification of RSA signatures with SHA3-224 via botan plugin.\n    * Close the internal IPv6 socket when a tun_device_t is destroyed .\n    * Update the address family in the SA selector when the addresses of a tunnel mode IPsec SA change in the\n      kernel-netlink plugin.\n- Version 6.0.5:\n  * Fixed a vulnerability in the eap-ttls plugin related to processing EAP-TTLS AVPs that can lead to resource\n    exhaustion or a crash.\n  * The new `icmp` option enables the forwarding of certain ICMP error messages (e.g. Fragmentation Needed), even if\n    their source address doesn't match the negotiated traffic selectors, when running on Linux kernels that support this\n    (v6.9+).\n  * charon-cmd now supports childless IKE SA initiation with the `--childless` option.\n  * The dhcp plugin now keeps track of address leases across make-before-break reauthentications to avoid releasing the\n    address when the old SA is terminated\n  * Added support for `organizationIdentifier` RDNs, which are used in e.g. eIDAS certificates, when parsing ASN.1 DN\n    identities from strings.\n","status":"published","published":"2026-05-05T07:18:26Z","modified":"2026-05-07T18:25:37.43972Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"SUSE-SU-2026:1637-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\n- CVE-2026-35328: infinite loop when handling supported versions TLS extension (bsc#1261712).\n- CVE-2026-35329: null pointer dereference when processing padding in PKCS#7 (bsc#1261717).\n- CVE-2026-35330: integer underflow when handling EAP-SIM/AKA attributes (bsc#1261705).\n- CVE-2026-35331: accepting certificates violating name constraints (bsc#1261718).\n- CVE-2026-35332: null pointer dereference when handling ECDH public value in TLS (bsc#1261708).\n- CVE-2026-35333: integer underflow when handling RADIUS attributes (bsc#1261706).\n- CVE-2026-35334: possible null pointer dereference in RSA decryption (bsc#1261720).\n","status":"published","published":"2026-04-27T16:59:38Z","modified":"2026-04-29T08:01:03.387882Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:1762-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\n- CVE-2026-35329: NULL pointer dereference when processing padding in PKCS#7 (bsc#1261717).\n- CVE-2026-35330: integer underflow when handling EAP-SIM/AKA attributes (bsc#1261705).\n- CVE-2026-35331: acceptance of certificates violating X.509 name constraints (bsc#1261718).\n- CVE-2026-35332: NULL pointer dereference when handling ECDH public value in TLS (bsc#1261708).\n- CVE-2026-35333: integer underflow when handling RADIUS attributes (bsc#1261706).\n- CVE-2026-35334: possible NULL pointer dereference in RSA decryption (bsc#1261720).\n","status":"published","published":"2026-05-08T08:58:26Z","modified":"2026-05-09T07:45:23.986361Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:21547-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues:\n\nUpdate to version 6.0.6 (jsc#PED-16145).\n\nSecurity issued fixed:\n\n- CVE-2026-35328: infinite loop when handling supported versions TLS extension (bsc#1261712).\n- CVE-2026-35329: NULL pointer dereference when processing padding in PKCS#7 (bsc#1261717).\n- CVE-2026-35330: integer underflow when handling EAP-SIM/AKA attributes (bsc#1261705).\n- CVE-2026-35331: acceptance of certificates violating X.509 name constraints (bsc#1261718).\n- CVE-2026-35332: NULL pointer dereference when handling ECDH public value in TLS (bsc#1261708).\n- CVE-2026-35333: integer underflow when handling RADIUS attributes (bsc#1261706).\n- CVE-2026-35334: possible NULL pointer dereference in RSA decryption (bsc#1261720).\n\nOther updates and bugfixes:\n\n- Version 6.0.6.\n  * Enhancements and Optimizations\n    * Added the unique ID to the log messages when creating an IKE SA as responder and when deleting such a half-open\n      SA\n    * The credential factory now enforces an upper limit of 10 when creating nested credentials.\n    * Added Georgian translation to the NM plugin.\n  * Fixes\n    * IKEv2 fragments with a total fragment count lower than before are now dropped as mandated by the RFC .\n    * Fixed a potential out-of-bounds read when parsing EAP-SIM/AKA attributes with actual length field.\n    * Fixed a potential out-of-bounds read when enumerating hashes in OCSP CERTREQ payloads .\n    * Fixed a potential crash in the vici plugin when parsing messages that encode the length of a VICI_LIST_ITEM\n      incorrectly.\n    * Avoid allocating a large buffer for TLS cipher suites on the stack using alloca().\n    * Ensure TLS 1.3 CertificateRequest structures are valid on the client.\n    * Prevent an infinite loop if the EAP-SIM version list on the client contains more than one entry .\n    * Fixed a crash in the tnccs_11 plugin if TNCCS-ReasonStrings is empty or only contains empty nodes .\n    * Fixed verification of RSA signatures with SHA3-224 via botan plugin.\n    * Close the internal IPv6 socket when a tun_device_t is destroyed .\n    * Update the address family in the SA selector when the addresses of a tunnel mode IPsec SA change in the\n      kernel-netlink plugin.\n- Version 6.0.5:\n  * Fixed a vulnerability in the eap-ttls plugin related to processing EAP-TTLS AVPs that can lead to resource\n    exhaustion or a crash.\n  * The new `icmp` option enables the forwarding of certain ICMP error messages (e.g. Fragmentation Needed), even if\n    their source address doesn't match the negotiated traffic selectors, when running on Linux kernels that support this\n    (v6.9+).\n  * charon-cmd now supports childless IKE SA initiation with the `--childless` option.\n  * The dhcp plugin now keeps track of address leases across make-before-break reauthentications to avoid releasing the\n    address when the old SA is terminated\n  * Added support for `organizationIdentifier` RDNs, which are used in e.g. eIDAS certificates, when parsing ASN.1 DN\n    identities from strings.\n","status":"published","published":"2026-05-05T07:13:20Z","modified":"2026-05-12T18:25:48.560467Z","updated_at":"2026-11-02T15:54:02.312556Z"},{"id":"SUSE-SU-2026:2368-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues\n\n- CVE-2026-35328: infinite loop when handling supported versions TLS extension (bsc#1261712).\n- CVE-2026-35329: null pointer dereference when processing padding in PKCS#7 (bsc#1261717).\n- CVE-2026-35330: integer underflow when handling EAP-SIM/AKA attributes (bsc#1261705).\n- CVE-2026-35331: accepting certificates violating name constraints (bsc#1261718).\n- CVE-2026-35332: null pointer dereference when handling ECDH public value in TLS (bsc#1261708).\n- CVE-2026-35333: integer underflow when handling RADIUS attributes (bsc#1261706).\n- CVE-2026-35334: possible null pointer dereference in RSA decryption (bsc#1261720).\n- CVE-2026-47895: double-free when destroying certain cloned identities (bsc#1266360).\n","status":"published","published":"2026-06-11T12:21:56Z","modified":"2026-06-12T08:45:05.811384536Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"SUSE-SU-2026:2459-1","title":"Security update for strongswan","description":"This update for strongswan fixes the following issues\n\n- CVE-2026-35328: infinite loop when handling supported versions TLS extension (bsc#1261712).\n- CVE-2026-35329: null pointer dereference when processing padding in PKCS#7 (bsc#1261717).\n- CVE-2026-35330: integer underflow when handling EAP-SIM/AKA attributes (bsc#1261705).\n- CVE-2026-35331: accepting certificates violating name constraints (bsc#1261718).\n- CVE-2026-35332: null pointer dereference when handling ECDH public value in TLS (bsc#1261708).\n- CVE-2026-35333: integer underflow when handling RADIUS attributes (bsc#1261706).\n- CVE-2026-35334: possible null pointer dereference in RSA decryption (bsc#1261720).\n- CVE-2026-47895: double-free when destroying certain cloned identities (bsc#1266360).\n","status":"published","published":"2026-06-18T16:40:02Z","modified":"2026-06-20T08:45:05.233836559Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"UBUNTU-CVE-2026-35331","description":"Accepting Certificates Violating Name Constraints","status":"published","published":"2026-04-22T12:00:00Z","modified":"2026-10-05T19:22:00.689859738Z","updated_at":"2026-11-02T16:56:16.686388Z"},{"id":"USN-8196-1","title":"strongswan vulnerabilities","description":"Haruto Kimura discovered that strongSwan incorrectly handled the\nsupported_versions extension in TLS. A remote attacker could possibly use\nthis issue to cause strongSwan to stop responding, resulting in a denial\nof service. (CVE-2026-35328)\n\nHaruto Kimura discovered that strongSwan incorrectly handled certain\nencrypted PKCS#7 containers. A remote attacker could possibly use this\nissue to cause strongSwan to crash, resulting in a denial of service.\n(CVE-2026-35329)\n\nLukas Johannes Moeller discovered that strongSwan incorrectly handled\ncertain EAP-SIM/AKA attributes. A remote attacker could use this issue to\ncause strongSwan to stop responding, resulting in a denial of service, or\npossibly execute arbitrary code. (CVE-2026-35330)\n\nHaruto Kimura discovered that strongSwan incorrectly handled processing of\nX.509 name constraints. A remote attacker could possibly use this issue to\nbypass excluded name constraints. (CVE-2026-35331)\n\nHaruto Kimura discovered that strongSwan incorrectly processed ECDH public\nvalues. A remote attacker could possibly use this issue to cause strongSwan\nto crash, resulting in a denial of service. (CVE-2026-35332)\n\nLukas Johannes Moeller discovered that strongSwan incorrectly handled\ncertain RADIUS attributes. A remote attacker could possibly use this issue\nto cause strongSwan to crash, resulting in a denial of service.\n(CVE-2026-35333)\n\nRyo Shimada discovered that strongSwan incorrectly handled RSA decryption.\nA remote attacker could possibly use this issue to cause strongSwan to\ncrash, resulting in a denial of service. (CVE-2026-35334)","status":"published","published":"2026-04-22T12:46:23Z","modified":"2026-04-27T19:02:35.850034548Z","updated_at":"2026-11-02T16:58:22.951676Z"}]}}