Описание
Security update for strongswan
This update for strongswan fixes the following issues:
- CVE-2026-35329: NULL pointer dereference when processing padding in PKCS#7 (bsc#1261717).
- CVE-2026-35330: integer underflow when handling EAP-SIM/AKA attributes (bsc#1261705).
- CVE-2026-35331: acceptance of certificates violating X.509 name constraints (bsc#1261718).
- CVE-2026-35332: NULL pointer dereference when handling ECDH public value in TLS (bsc#1261708).
- CVE-2026-35333: integer underflow when handling RADIUS attributes (bsc#1261706).
- CVE-2026-35334: possible NULL pointer dereference in RSA decryption (bsc#1261720).
Список пакетов
SUSE Linux Enterprise Server 12 SP5-LTSS
strongswan-5.1.3-26.35.1
strongswan-doc-5.1.3-26.35.1
strongswan-hmac-5.1.3-26.35.1
strongswan-ipsec-5.1.3-26.35.1
strongswan-libs0-5.1.3-26.35.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
strongswan-5.1.3-26.35.1
strongswan-doc-5.1.3-26.35.1
strongswan-hmac-5.1.3-26.35.1
strongswan-ipsec-5.1.3-26.35.1
strongswan-libs0-5.1.3-26.35.1
Ссылки
- Link for SUSE-SU-2026:1762-1
- E-Mail link for SUSE-SU-2026:1762-1
- SUSE Security Ratings
- SUSE Bug 1261705
- SUSE Bug 1261706
- SUSE Bug 1261708
- SUSE Bug 1261717
- SUSE Bug 1261718
- SUSE Bug 1261720
- SUSE CVE CVE-2026-35329 page
- SUSE CVE CVE-2026-35330 page
- SUSE CVE CVE-2026-35331 page
- SUSE CVE CVE-2026-35332 page
- SUSE CVE CVE-2026-35333 page
- SUSE CVE CVE-2026-35334 page
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5-LTSS:strongswan-5.1.3-26.35.1
SUSE Linux Enterprise Server 12 SP5-LTSS:strongswan-doc-5.1.3-26.35.1
SUSE Linux Enterprise Server 12 SP5-LTSS:strongswan-hmac-5.1.3-26.35.1
SUSE Linux Enterprise Server 12 SP5-LTSS:strongswan-ipsec-5.1.3-26.35.1
Ссылки
- CVE-2026-35329
- SUSE Bug 1261717
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5-LTSS:strongswan-5.1.3-26.35.1
SUSE Linux Enterprise Server 12 SP5-LTSS:strongswan-doc-5.1.3-26.35.1
SUSE Linux Enterprise Server 12 SP5-LTSS:strongswan-hmac-5.1.3-26.35.1
SUSE Linux Enterprise Server 12 SP5-LTSS:strongswan-ipsec-5.1.3-26.35.1
Ссылки
- CVE-2026-35330
- SUSE Bug 1261705
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5-LTSS:strongswan-5.1.3-26.35.1
SUSE Linux Enterprise Server 12 SP5-LTSS:strongswan-doc-5.1.3-26.35.1
SUSE Linux Enterprise Server 12 SP5-LTSS:strongswan-hmac-5.1.3-26.35.1
SUSE Linux Enterprise Server 12 SP5-LTSS:strongswan-ipsec-5.1.3-26.35.1
Ссылки
- CVE-2026-35331
- SUSE Bug 1261718
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5-LTSS:strongswan-5.1.3-26.35.1
SUSE Linux Enterprise Server 12 SP5-LTSS:strongswan-doc-5.1.3-26.35.1
SUSE Linux Enterprise Server 12 SP5-LTSS:strongswan-hmac-5.1.3-26.35.1
SUSE Linux Enterprise Server 12 SP5-LTSS:strongswan-ipsec-5.1.3-26.35.1
Ссылки
- CVE-2026-35332
- SUSE Bug 1261708
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5-LTSS:strongswan-5.1.3-26.35.1
SUSE Linux Enterprise Server 12 SP5-LTSS:strongswan-doc-5.1.3-26.35.1
SUSE Linux Enterprise Server 12 SP5-LTSS:strongswan-hmac-5.1.3-26.35.1
SUSE Linux Enterprise Server 12 SP5-LTSS:strongswan-ipsec-5.1.3-26.35.1
Ссылки
- CVE-2026-35333
- SUSE Bug 1261706
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5-LTSS:strongswan-5.1.3-26.35.1
SUSE Linux Enterprise Server 12 SP5-LTSS:strongswan-doc-5.1.3-26.35.1
SUSE Linux Enterprise Server 12 SP5-LTSS:strongswan-hmac-5.1.3-26.35.1
SUSE Linux Enterprise Server 12 SP5-LTSS:strongswan-ipsec-5.1.3-26.35.1
Ссылки
- CVE-2026-35334
- SUSE Bug 1261720