RLSA-2026:98088

See a problem?
Please try reporting it to the source first.
Source
https://errata.rockylinux.org/RLSA-2026:98088
Import Source
https://storage.googleapis.com/resf-osv-data/RLSA-2026:98088.json
JSON Data
https://api.osv.dev/v1/vulns/RLSA-2026:98088
Upstream
CVE (3)
  • CVE-2026-77206
  • CVE-2026-77207
  • CVE-2026-94453
Published
2026-11-13T12:06:37Z
Modified
2026-11-13T12:45:04Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Important: libreswan security update
Details

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN).

Security Fix(es):

  • libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP (CVE-2026-94453)

  • libreswan: IKEv2 pre-authentication Null Pointer deref in EAP code (CVE-2026-77206)

  • libreswan: Null Pointer Dereference in PKCS#7 bundle with no CERTS (CVE-2026-77207)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Database specific 
{
    "license": "CC-BY-4.0",
    "license_url": "https://creativecommons.org/licenses/by/4.0/",
    "source_advisory": "RHSA-2026:98088"
}
References
Credits
    • Rocky Enterprise Software Foundation
    • Red Hat

Affected packages

Rocky Linux:10
libreswan-minimal

Package

Name
libreswan-minimal
Purl
pkg:rpm/rocky-linux/libreswan-minimal?distro=rocky-linux-10&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:5.4.1-1.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98088.json"
libreswan-debugsource

Package

Name
libreswan-debugsource
Purl
pkg:rpm/rocky-linux/libreswan-debugsource?distro=rocky-linux-10&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:5.4.1-1.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98088.json"
libreswan-minimal-debuginfo

Package

Name
libreswan-minimal-debuginfo
Purl
pkg:rpm/rocky-linux/libreswan-minimal-debuginfo?distro=rocky-linux-10&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:5.4.1-1.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98088.json"
libreswan

Package

Name
libreswan
Purl
pkg:rpm/rocky-linux/libreswan?distro=rocky-linux-10&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:5.4.1-1.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98088.json"
libreswan

Package

Name
libreswan
Purl
pkg:rpm/rocky-linux/libreswan?distro=rocky-linux-10&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:5.4.1-1.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98088.json"
libreswan-minimal-debuginfo

Package

Name
libreswan-minimal-debuginfo
Purl
pkg:rpm/rocky-linux/libreswan-minimal-debuginfo?distro=rocky-linux-10&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:5.4.1-1.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98088.json"
libreswan-minimal

Package

Name
libreswan-minimal
Purl
pkg:rpm/rocky-linux/libreswan-minimal?distro=rocky-linux-10&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:5.4.1-1.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98088.json"
libreswan-debugsource

Package

Name
libreswan-debugsource
Purl
pkg:rpm/rocky-linux/libreswan-debugsource?distro=rocky-linux-10&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:5.4.1-1.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98088.json"
libreswan-minimal

Package

Name
libreswan-minimal
Purl
pkg:rpm/rocky-linux/libreswan-minimal?distro=rocky-linux-10&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:5.4.1-1.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98088.json"
libreswan-minimal-debuginfo

Package

Name
libreswan-minimal-debuginfo
Purl
pkg:rpm/rocky-linux/libreswan-minimal-debuginfo?distro=rocky-linux-10&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:5.4.1-1.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98088.json"
libreswan

Package

Name
libreswan
Purl
pkg:rpm/rocky-linux/libreswan?distro=rocky-linux-10&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:5.4.1-1.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98088.json"
libreswan-debugsource

Package

Name
libreswan-debugsource
Purl
pkg:rpm/rocky-linux/libreswan-debugsource?distro=rocky-linux-10&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:5.4.1-1.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98088.json"
libreswan

Package

Name
libreswan
Purl
pkg:rpm/rocky-linux/libreswan?distro=rocky-linux-10&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:5.4.1-1.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98088.json"
libreswan-debugsource

Package

Name
libreswan-debugsource
Purl
pkg:rpm/rocky-linux/libreswan-debugsource?distro=rocky-linux-10&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:5.4.1-1.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98088.json"
libreswan-minimal-debuginfo

Package

Name
libreswan-minimal-debuginfo
Purl
pkg:rpm/rocky-linux/libreswan-minimal-debuginfo?distro=rocky-linux-10&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:5.4.1-1.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98088.json"
libreswan-minimal

Package

Name
libreswan-minimal
Purl
pkg:rpm/rocky-linux/libreswan-minimal?distro=rocky-linux-10&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:5.4.1-1.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98088.json"