Описание
Security update for strongswan
This update for strongswan fixes the following issues:
- CVE-2026-35328: infinite loop when handling supported versions TLS extension (bsc#1261712).
- CVE-2026-35329: null pointer dereference when processing padding in PKCS#7 (bsc#1261717).
- CVE-2026-35330: integer underflow when handling EAP-SIM/AKA attributes (bsc#1261705).
- CVE-2026-35331: accepting certificates violating name constraints (bsc#1261718).
- CVE-2026-35332: null pointer dereference when handling ECDH public value in TLS (bsc#1261708).
- CVE-2026-35333: integer underflow when handling RADIUS attributes (bsc#1261706).
- CVE-2026-35334: possible null pointer dereference in RSA decryption (bsc#1261720).
Список пакетов
SUSE Linux Enterprise Module for Basesystem 15 SP7
strongswan-5.9.14-150700.3.14.1
strongswan-doc-5.9.14-150700.3.14.1
strongswan-hmac-5.9.14-150700.3.14.1
strongswan-ipsec-5.9.14-150700.3.14.1
strongswan-libs0-5.9.14-150700.3.14.1
SUSE Linux Enterprise Module for Package Hub 15 SP7
strongswan-nm-5.9.14-150700.3.14.1
SUSE Linux Enterprise Workstation Extension 15 SP7
strongswan-nm-5.9.14-150700.3.14.1
Ссылки
- Link for SUSE-SU-2026:1637-1
- E-Mail link for SUSE-SU-2026:1637-1
- SUSE Security Ratings
- SUSE Bug 1261705
- SUSE Bug 1261706
- SUSE Bug 1261708
- SUSE Bug 1261712
- SUSE Bug 1261717
- SUSE Bug 1261718
- SUSE Bug 1261720
- SUSE CVE CVE-2026-35328 page
- SUSE CVE CVE-2026-35329 page
- SUSE CVE CVE-2026-35330 page
- SUSE CVE CVE-2026-35331 page
- SUSE CVE CVE-2026-35332 page
- SUSE CVE CVE-2026-35333 page
- SUSE CVE CVE-2026-35334 page
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP7:strongswan-5.9.14-150700.3.14.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:strongswan-doc-5.9.14-150700.3.14.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:strongswan-hmac-5.9.14-150700.3.14.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:strongswan-ipsec-5.9.14-150700.3.14.1
Ссылки
- CVE-2026-35328
- SUSE Bug 1261712
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP7:strongswan-5.9.14-150700.3.14.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:strongswan-doc-5.9.14-150700.3.14.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:strongswan-hmac-5.9.14-150700.3.14.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:strongswan-ipsec-5.9.14-150700.3.14.1
Ссылки
- CVE-2026-35329
- SUSE Bug 1261717
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP7:strongswan-5.9.14-150700.3.14.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:strongswan-doc-5.9.14-150700.3.14.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:strongswan-hmac-5.9.14-150700.3.14.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:strongswan-ipsec-5.9.14-150700.3.14.1
Ссылки
- CVE-2026-35330
- SUSE Bug 1261705
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP7:strongswan-5.9.14-150700.3.14.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:strongswan-doc-5.9.14-150700.3.14.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:strongswan-hmac-5.9.14-150700.3.14.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:strongswan-ipsec-5.9.14-150700.3.14.1
Ссылки
- CVE-2026-35331
- SUSE Bug 1261718
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP7:strongswan-5.9.14-150700.3.14.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:strongswan-doc-5.9.14-150700.3.14.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:strongswan-hmac-5.9.14-150700.3.14.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:strongswan-ipsec-5.9.14-150700.3.14.1
Ссылки
- CVE-2026-35332
- SUSE Bug 1261708
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP7:strongswan-5.9.14-150700.3.14.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:strongswan-doc-5.9.14-150700.3.14.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:strongswan-hmac-5.9.14-150700.3.14.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:strongswan-ipsec-5.9.14-150700.3.14.1
Ссылки
- CVE-2026-35333
- SUSE Bug 1261706
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP7:strongswan-5.9.14-150700.3.14.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:strongswan-doc-5.9.14-150700.3.14.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:strongswan-hmac-5.9.14-150700.3.14.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:strongswan-ipsec-5.9.14-150700.3.14.1
Ссылки
- CVE-2026-35334
- SUSE Bug 1261720