{
  "document" : {
    "aggregate_severity" : {
      "namespace" : "https://access.redhat.com/security/updates/classification/",
      "text" : "Important"
    },
    "category" : "csaf_security_advisory",
    "csaf_version" : "2.0",
    "distribution" : {
      "text" : "Copyright © Red Hat, Inc. All rights reserved.",
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "en",
    "notes" : [ {
      "category" : "summary",
      "text" : "An update for libreswan is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
      "title" : "Topic"
    }, {
      "category" : "general",
      "text" : "Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN).\n\nSecurity Fix(es):\n\n* libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP (CVE-2026-94453)\n\n* libreswan: Denial of Service via sending bogus X.509 certificates (CVE-2026-77205)\n\n* libreswan: Null Pointer Dereference in PKCS#7 bundle with no CERTS (CVE-2026-77207)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
      "title" : "Details"
    }, {
      "category" : "legal_disclaimer",
      "text" : "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
      "title" : "Terms of Use"
    } ],
    "publisher" : {
      "category" : "vendor",
      "contact_details" : "https://access.redhat.com/security/team/contact/",
      "issuing_authority" : "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name" : "Red Hat Product Security",
      "namespace" : "https://www.redhat.com"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "https://access.redhat.com/errata/RHSA-2026:89923",
      "url" : "https://access.redhat.com/errata/RHSA-2026:89923"
    }, {
      "category" : "external",
      "summary" : "https://access.redhat.com/security/updates/classification/#important",
      "url" : "https://access.redhat.com/security/updates/classification/#important"
    }, {
      "category" : "external",
      "summary" : "2550254",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2550254"
    }, {
      "category" : "external",
      "summary" : "2550255",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2550255"
    }, {
      "category" : "external",
      "summary" : "2550258",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2550258"
    }, {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_89923.json"
    } ],
    "title" : "Red Hat Security Advisory: libreswan security update",
    "tracking" : {
      "current_release_date" : "2026-11-09T16:38:26+00:00",
      "generator" : {
        "date" : "2026-11-09T16:38:26+00:00",
        "engine" : {
          "name" : "Red Hat SDEngine",
          "version" : "5.4.5"
        }
      },
      "id" : "RHSA-2026:89923",
      "initial_release_date" : "2026-10-26T12:52:47+00:00",
      "revision_history" : [ {
        "date" : "2026-10-26T12:52:47+00:00",
        "number" : "1",
        "summary" : "Initial version"
      }, {
        "date" : "2026-10-26T12:52:47+00:00",
        "number" : "2",
        "summary" : "Last updated version"
      }, {
        "date" : "2026-11-09T16:38:26+00:00",
        "number" : "3",
        "summary" : "Last generated version"
      } ],
      "status" : "final",
      "version" : "3"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "branches" : [ {
          "category" : "product_name",
          "name" : "Red Hat Enterprise Linux AppStream (v. 10)",
          "product" : {
            "name" : "Red Hat Enterprise Linux AppStream (v. 10)",
            "product_id" : "AppStream-10.2.Z",
            "product_identification_helper" : {
              "cpe" : "cpe:/o:redhat:enterprise_linux:10.2"
            }
          }
        } ],
        "category" : "product_family",
        "name" : "Red Hat Enterprise Linux"
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "libreswan-0:5.3.3-1.el10_2.ppc64le",
          "product" : {
            "name" : "libreswan-0:5.3.3-1.el10_2.ppc64le",
            "product_id" : "libreswan-0:5.3.3-1.el10_2.ppc64le",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/libreswan@5.3.3-1.el10_2?arch=ppc64le"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "libreswan-minimal-0:5.3.3-1.el10_2.ppc64le",
          "product" : {
            "name" : "libreswan-minimal-0:5.3.3-1.el10_2.ppc64le",
            "product_id" : "libreswan-minimal-0:5.3.3-1.el10_2.ppc64le",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/libreswan-minimal@5.3.3-1.el10_2?arch=ppc64le"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "libreswan-debugsource-0:5.3.3-1.el10_2.ppc64le",
          "product" : {
            "name" : "libreswan-debugsource-0:5.3.3-1.el10_2.ppc64le",
            "product_id" : "libreswan-debugsource-0:5.3.3-1.el10_2.ppc64le",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/libreswan-debugsource@5.3.3-1.el10_2?arch=ppc64le"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.ppc64le",
          "product" : {
            "name" : "libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.ppc64le",
            "product_id" : "libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.ppc64le",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/libreswan-minimal-debuginfo@5.3.3-1.el10_2?arch=ppc64le"
            }
          }
        } ],
        "category" : "architecture",
        "name" : "ppc64le"
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "libreswan-0:5.3.3-1.el10_2.src",
          "product" : {
            "name" : "libreswan-0:5.3.3-1.el10_2.src",
            "product_id" : "libreswan-0:5.3.3-1.el10_2.src",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/libreswan@5.3.3-1.el10_2?arch=src"
            }
          }
        } ],
        "category" : "architecture",
        "name" : "src"
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "libreswan-0:5.3.3-1.el10_2.aarch64",
          "product" : {
            "name" : "libreswan-0:5.3.3-1.el10_2.aarch64",
            "product_id" : "libreswan-0:5.3.3-1.el10_2.aarch64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/libreswan@5.3.3-1.el10_2?arch=aarch64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "libreswan-minimal-0:5.3.3-1.el10_2.aarch64",
          "product" : {
            "name" : "libreswan-minimal-0:5.3.3-1.el10_2.aarch64",
            "product_id" : "libreswan-minimal-0:5.3.3-1.el10_2.aarch64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/libreswan-minimal@5.3.3-1.el10_2?arch=aarch64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "libreswan-debugsource-0:5.3.3-1.el10_2.aarch64",
          "product" : {
            "name" : "libreswan-debugsource-0:5.3.3-1.el10_2.aarch64",
            "product_id" : "libreswan-debugsource-0:5.3.3-1.el10_2.aarch64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/libreswan-debugsource@5.3.3-1.el10_2?arch=aarch64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.aarch64",
          "product" : {
            "name" : "libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.aarch64",
            "product_id" : "libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.aarch64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/libreswan-minimal-debuginfo@5.3.3-1.el10_2?arch=aarch64"
            }
          }
        } ],
        "category" : "architecture",
        "name" : "aarch64"
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "libreswan-0:5.3.3-1.el10_2.s390x",
          "product" : {
            "name" : "libreswan-0:5.3.3-1.el10_2.s390x",
            "product_id" : "libreswan-0:5.3.3-1.el10_2.s390x",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/libreswan@5.3.3-1.el10_2?arch=s390x"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "libreswan-minimal-0:5.3.3-1.el10_2.s390x",
          "product" : {
            "name" : "libreswan-minimal-0:5.3.3-1.el10_2.s390x",
            "product_id" : "libreswan-minimal-0:5.3.3-1.el10_2.s390x",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/libreswan-minimal@5.3.3-1.el10_2?arch=s390x"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "libreswan-debugsource-0:5.3.3-1.el10_2.s390x",
          "product" : {
            "name" : "libreswan-debugsource-0:5.3.3-1.el10_2.s390x",
            "product_id" : "libreswan-debugsource-0:5.3.3-1.el10_2.s390x",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/libreswan-debugsource@5.3.3-1.el10_2?arch=s390x"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.s390x",
          "product" : {
            "name" : "libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.s390x",
            "product_id" : "libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.s390x",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/libreswan-minimal-debuginfo@5.3.3-1.el10_2?arch=s390x"
            }
          }
        } ],
        "category" : "architecture",
        "name" : "s390x"
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "libreswan-0:5.3.3-1.el10_2.x86_64",
          "product" : {
            "name" : "libreswan-0:5.3.3-1.el10_2.x86_64",
            "product_id" : "libreswan-0:5.3.3-1.el10_2.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/libreswan@5.3.3-1.el10_2?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "libreswan-minimal-0:5.3.3-1.el10_2.x86_64",
          "product" : {
            "name" : "libreswan-minimal-0:5.3.3-1.el10_2.x86_64",
            "product_id" : "libreswan-minimal-0:5.3.3-1.el10_2.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/libreswan-minimal@5.3.3-1.el10_2?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "libreswan-debugsource-0:5.3.3-1.el10_2.x86_64",
          "product" : {
            "name" : "libreswan-debugsource-0:5.3.3-1.el10_2.x86_64",
            "product_id" : "libreswan-debugsource-0:5.3.3-1.el10_2.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/libreswan-debugsource@5.3.3-1.el10_2?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.x86_64",
          "product" : {
            "name" : "libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.x86_64",
            "product_id" : "libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/libreswan-minimal-debuginfo@5.3.3-1.el10_2?arch=x86_64"
            }
          }
        } ],
        "category" : "architecture",
        "name" : "x86_64"
      } ],
      "category" : "vendor",
      "name" : "Red Hat"
    } ],
    "relationships" : [ {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "libreswan-0:5.3.3-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
        "product_id" : "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.aarch64"
      },
      "product_reference" : "libreswan-0:5.3.3-1.el10_2.aarch64",
      "relates_to_product_reference" : "AppStream-10.2.Z"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "libreswan-0:5.3.3-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
        "product_id" : "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.ppc64le"
      },
      "product_reference" : "libreswan-0:5.3.3-1.el10_2.ppc64le",
      "relates_to_product_reference" : "AppStream-10.2.Z"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "libreswan-0:5.3.3-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
        "product_id" : "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.s390x"
      },
      "product_reference" : "libreswan-0:5.3.3-1.el10_2.s390x",
      "relates_to_product_reference" : "AppStream-10.2.Z"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "libreswan-0:5.3.3-1.el10_2.src as a component of Red Hat Enterprise Linux AppStream (v. 10)",
        "product_id" : "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.src"
      },
      "product_reference" : "libreswan-0:5.3.3-1.el10_2.src",
      "relates_to_product_reference" : "AppStream-10.2.Z"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "libreswan-0:5.3.3-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
        "product_id" : "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.x86_64"
      },
      "product_reference" : "libreswan-0:5.3.3-1.el10_2.x86_64",
      "relates_to_product_reference" : "AppStream-10.2.Z"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "libreswan-debugsource-0:5.3.3-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
        "product_id" : "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.aarch64"
      },
      "product_reference" : "libreswan-debugsource-0:5.3.3-1.el10_2.aarch64",
      "relates_to_product_reference" : "AppStream-10.2.Z"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "libreswan-debugsource-0:5.3.3-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
        "product_id" : "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.ppc64le"
      },
      "product_reference" : "libreswan-debugsource-0:5.3.3-1.el10_2.ppc64le",
      "relates_to_product_reference" : "AppStream-10.2.Z"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "libreswan-debugsource-0:5.3.3-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
        "product_id" : "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.s390x"
      },
      "product_reference" : "libreswan-debugsource-0:5.3.3-1.el10_2.s390x",
      "relates_to_product_reference" : "AppStream-10.2.Z"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "libreswan-debugsource-0:5.3.3-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
        "product_id" : "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.x86_64"
      },
      "product_reference" : "libreswan-debugsource-0:5.3.3-1.el10_2.x86_64",
      "relates_to_product_reference" : "AppStream-10.2.Z"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "libreswan-minimal-0:5.3.3-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
        "product_id" : "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.aarch64"
      },
      "product_reference" : "libreswan-minimal-0:5.3.3-1.el10_2.aarch64",
      "relates_to_product_reference" : "AppStream-10.2.Z"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "libreswan-minimal-0:5.3.3-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
        "product_id" : "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.ppc64le"
      },
      "product_reference" : "libreswan-minimal-0:5.3.3-1.el10_2.ppc64le",
      "relates_to_product_reference" : "AppStream-10.2.Z"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "libreswan-minimal-0:5.3.3-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
        "product_id" : "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.s390x"
      },
      "product_reference" : "libreswan-minimal-0:5.3.3-1.el10_2.s390x",
      "relates_to_product_reference" : "AppStream-10.2.Z"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "libreswan-minimal-0:5.3.3-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
        "product_id" : "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.x86_64"
      },
      "product_reference" : "libreswan-minimal-0:5.3.3-1.el10_2.x86_64",
      "relates_to_product_reference" : "AppStream-10.2.Z"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
        "product_id" : "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.aarch64"
      },
      "product_reference" : "libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.aarch64",
      "relates_to_product_reference" : "AppStream-10.2.Z"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
        "product_id" : "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.ppc64le"
      },
      "product_reference" : "libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.ppc64le",
      "relates_to_product_reference" : "AppStream-10.2.Z"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
        "product_id" : "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.s390x"
      },
      "product_reference" : "libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.s390x",
      "relates_to_product_reference" : "AppStream-10.2.Z"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
        "product_id" : "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.x86_64"
      },
      "product_reference" : "libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.x86_64",
      "relates_to_product_reference" : "AppStream-10.2.Z"
    } ]
  },
  "vulnerabilities" : [ {
    "cve" : "CVE-2026-77205",
    "cwe" : {
      "id" : "CWE-459",
      "name" : "Incomplete Cleanup"
    },
    "discovery_date" : "2026-10-13T07:34:17.231000+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2550255"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in Libreswan's handling of malformed X.509 certificates when running in FIPS mode. A remote attacker may cause a rejected certificate to remain in the NSS certificate cache, resulting in legitimate certificates with the same serial number being rejected. This can prevent affected peers from establishing connections until the Libreswan service is restarted.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "libreswan: Denial of Service via sending bogus X.509 certificates",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "This vulnerability is rated as having a Low impact because exploitation requires the system to operate in FIPS mode and depends on an adversary correctly guessing or intercepting certificate serial numbers, making attack complexity as high. Furthermore, the issue only produces a targeted denial of service by temporarily preventing legitimate peers with matching serial numbers from connecting, without causing daemon crashes or compromising system data, indicating low impact to Availability.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.src", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-77205"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2550255",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2550255"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-77205",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-77205"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-77205",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-77205"
    }, {
      "category" : "external",
      "summary" : "https://libreswan.org/security/CVE-2026-77205/CVE-2026-77205.txt",
      "url" : "https://libreswan.org/security/CVE-2026-77205/CVE-2026-77205.txt"
    }, {
      "category" : "external",
      "summary" : "https://libreswan.org/security/CVE-2026-77205/libreswan-5.3-CVE-2026-77205.patch",
      "url" : "https://libreswan.org/security/CVE-2026-77205/libreswan-5.3-CVE-2026-77205.patch"
    } ],
    "release_date" : "2026-10-05T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-10-26T12:52:47+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.src", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:89923"
    }, {
      "category" : "workaround",
      "details" : "Disabling FIPS mode will prevent this attack vector. However, disabling FIPS mode may violate security or compliance requirements and should not be used as a workaround without authorization.",
      "product_ids" : [ "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.src", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "HIGH",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "LOW",
        "baseScore" : 3.7,
        "baseSeverity" : "LOW",
        "confidentialityImpact" : "NONE",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
        "version" : "3.1"
      },
      "products" : [ "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.src", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Low"
    } ],
    "title" : "libreswan: Denial of Service via sending bogus X.509 certificates"
  }, {
    "cve" : "CVE-2026-77207",
    "cwe" : {
      "id" : "CWE-476",
      "name" : "NULL Pointer Dereference"
    },
    "discovery_date" : "2026-10-13T07:34:23.608000+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2550258"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A null pointer dereference flaw was found in Libreswan's PKCS#7 certificate payload handling. When processing a crafted IKEv2 IKE_AUTH packet containing a PKCS#7 bundle with a certificate revocation list but no certificates, Libreswan may dereference a null pointer, causing the pluto daemon to crash and restart. A remote, unauthenticated attacker could repeatedly trigger this flaw to cause a denial of service.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "libreswan: Null Pointer Dereference in PKCS#7 bundle with no CERTS",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "This vulnerability is rated as Moderate impact for Red Hat because exploitation requires Libreswan to be deployed, configured, and running as an IKEv2 endpoint, which is not the default configuration of a general-purpose Red Hat Enterprise Linux installation. A remote, unauthenticated attacker can send a crafted IKEv2 packet to crash the Libreswan daemon, potentially disrupting VPN connectivity. Although, systemd supervision typically restarts the crashed process automatically, reducing the persistence of service interruptions, repeated exploitation can cause continued denial of service.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.src", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-77207"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2550258",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2550258"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-77207",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-77207"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-77207",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-77207"
    }, {
      "category" : "external",
      "summary" : "https://libreswan.org/security/CVE-2026-77207/CVE-2026-77207.txt",
      "url" : "https://libreswan.org/security/CVE-2026-77207/CVE-2026-77207.txt"
    }, {
      "category" : "external",
      "summary" : "https://libreswan.org/security/CVE-2026-77207/libreswan-5.3-CVE-2026-77207.patch",
      "url" : "https://libreswan.org/security/CVE-2026-77207/libreswan-5.3-CVE-2026-77207.patch"
    }, {
      "category" : "external",
      "summary" : "https://libreswan.org/security/CVE-2026-77207/libreswan-5.4-CVE-2026-77207.patch",
      "url" : "https://libreswan.org/security/CVE-2026-77207/libreswan-5.4-CVE-2026-77207.patch"
    } ],
    "release_date" : "2026-10-05T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-10-26T12:52:47+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.src", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:89923"
    }, {
      "category" : "workaround",
      "details" : "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security's standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when/if they become available.",
      "product_ids" : [ "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.src", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 7.5,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "NONE",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.src", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "libreswan: Null Pointer Dereference in PKCS#7 bundle with no CERTS"
  }, {
    "cve" : "CVE-2026-94453",
    "cwe" : {
      "id" : "CWE-416",
      "name" : "Use After Free"
    },
    "discovery_date" : "2026-10-13T00:00:00+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2550254"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A use-after-free flaw was found in Libreswan's IKE-over-TCP handling. When a TCP connection closes and additional packet processing occurs for the same connection tuple, the IKE daemon may access a previously freed interface endpoint object. A remote, unauthenticated attacker may exploit this flaw to cause the pluto daemon to crash and restart, resulting in denial of service.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security has rated this vulnerability as having an Important security impact. A remote, unauthenticated attacker may exploit a use-after-free in Libreswan's IKE-over-TCP handling before peer authentication to cause the IKE daemon to crash and restart. Repeated exploitation can result in denial of service.\n\nThe vulnerability affects only configurations that explicitly enable IKE-over-TCP using `listen-tcp=yes`; this option is not enabled by default. Consequently, exposure is limited to systems configured to accept IKE-over-TCP connections.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.src", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-94453"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2550254",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2550254"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-94453",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-94453"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-94453",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-94453"
    }, {
      "category" : "external",
      "summary" : "https://libreswan.org/security/CVE-2026-94453/CVE-2026-94453.txt",
      "url" : "https://libreswan.org/security/CVE-2026-94453/CVE-2026-94453.txt"
    }, {
      "category" : "external",
      "summary" : "https://libreswan.org/security/CVE-2026-94453/libreswan-5.3-CVE-2026-94453.patch",
      "url" : "https://libreswan.org/security/CVE-2026-94453/libreswan-5.3-CVE-2026-94453.patch"
    }, {
      "category" : "external",
      "summary" : "https://libreswan.org/security/CVE-2026-94453/libreswan-5.4-CVE-2026-94453.patch",
      "url" : "https://libreswan.org/security/CVE-2026-94453/libreswan-5.4-CVE-2026-94453.patch"
    } ],
    "release_date" : "2026-10-05T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-10-26T12:52:47+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.src", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:89923"
    }, {
      "category" : "workaround",
      "details" : "If IKE-over-TCP is not required, administrators can temporarily mitigate this vulnerability by setting `listen-tcp=no` in the Libreswan configuration. This disables the vulnerable IKE-over-TCP functionality. \n\nIf IKE-over-TCP is required, administrators should restrict access to the listener to trusted peers where practical and apply the appropriate security update once available.",
      "product_ids" : [ "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.src", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 7.5,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "NONE",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.src", "AppStream-10.2.Z:libreswan-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-debugsource-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-minimal-0:5.3.3-1.el10_2.x86_64", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.aarch64", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.ppc64le", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.s390x", "AppStream-10.2.Z:libreswan-minimal-debuginfo-0:5.3.3-1.el10_2.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP"
  } ]
}