Описание
Security update for strongswan
This update for strongswan fixes the following issues:
- CVE-2026-35328: infinite loop when handling supported versions TLS extension (bsc#1261712).
- CVE-2026-35329: null pointer dereference when processing padding in PKCS#7 (bsc#1261717).
- CVE-2026-35330: integer underflow when handling EAP-SIM/AKA attributes (bsc#1261705).
- CVE-2026-35332: null pointer dereference when handling ECDH public value in TLS (bsc#1261708).
- CVE-2026-35333: integer underflow when handling RADIUS attributes (bsc#1261706).
- CVE-2026-35334: null pointer dereference in RSA decryption (bsc#1261720).
Список пакетов
SUSE Linux Enterprise Server 15 SP6-LTSS
strongswan-5.9.12-150600.3.16.1
strongswan-doc-5.9.12-150600.3.16.1
strongswan-hmac-5.9.12-150600.3.16.1
strongswan-ipsec-5.9.12-150600.3.16.1
strongswan-libs0-5.9.12-150600.3.16.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6
strongswan-5.9.12-150600.3.16.1
strongswan-doc-5.9.12-150600.3.16.1
strongswan-hmac-5.9.12-150600.3.16.1
strongswan-ipsec-5.9.12-150600.3.16.1
strongswan-libs0-5.9.12-150600.3.16.1
Ссылки
- Link for SUSE-SU-2026:2197-1
- E-Mail link for SUSE-SU-2026:2197-1
- SUSE Security Ratings
- SUSE Bug 1261705
- SUSE Bug 1261706
- SUSE Bug 1261708
- SUSE Bug 1261712
- SUSE Bug 1261717
- SUSE Bug 1261720
- SUSE CVE CVE-2026-35328 page
- SUSE CVE CVE-2026-35329 page
- SUSE CVE CVE-2026-35330 page
- SUSE CVE CVE-2026-35332 page
- SUSE CVE CVE-2026-35333 page
- SUSE CVE CVE-2026-35334 page
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 15 SP6-LTSS:strongswan-5.9.12-150600.3.16.1
SUSE Linux Enterprise Server 15 SP6-LTSS:strongswan-doc-5.9.12-150600.3.16.1
SUSE Linux Enterprise Server 15 SP6-LTSS:strongswan-hmac-5.9.12-150600.3.16.1
SUSE Linux Enterprise Server 15 SP6-LTSS:strongswan-ipsec-5.9.12-150600.3.16.1
Ссылки
- CVE-2026-35328
- SUSE Bug 1261712
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 15 SP6-LTSS:strongswan-5.9.12-150600.3.16.1
SUSE Linux Enterprise Server 15 SP6-LTSS:strongswan-doc-5.9.12-150600.3.16.1
SUSE Linux Enterprise Server 15 SP6-LTSS:strongswan-hmac-5.9.12-150600.3.16.1
SUSE Linux Enterprise Server 15 SP6-LTSS:strongswan-ipsec-5.9.12-150600.3.16.1
Ссылки
- CVE-2026-35329
- SUSE Bug 1261717
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 15 SP6-LTSS:strongswan-5.9.12-150600.3.16.1
SUSE Linux Enterprise Server 15 SP6-LTSS:strongswan-doc-5.9.12-150600.3.16.1
SUSE Linux Enterprise Server 15 SP6-LTSS:strongswan-hmac-5.9.12-150600.3.16.1
SUSE Linux Enterprise Server 15 SP6-LTSS:strongswan-ipsec-5.9.12-150600.3.16.1
Ссылки
- CVE-2026-35330
- SUSE Bug 1261705
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 15 SP6-LTSS:strongswan-5.9.12-150600.3.16.1
SUSE Linux Enterprise Server 15 SP6-LTSS:strongswan-doc-5.9.12-150600.3.16.1
SUSE Linux Enterprise Server 15 SP6-LTSS:strongswan-hmac-5.9.12-150600.3.16.1
SUSE Linux Enterprise Server 15 SP6-LTSS:strongswan-ipsec-5.9.12-150600.3.16.1
Ссылки
- CVE-2026-35332
- SUSE Bug 1261708
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 15 SP6-LTSS:strongswan-5.9.12-150600.3.16.1
SUSE Linux Enterprise Server 15 SP6-LTSS:strongswan-doc-5.9.12-150600.3.16.1
SUSE Linux Enterprise Server 15 SP6-LTSS:strongswan-hmac-5.9.12-150600.3.16.1
SUSE Linux Enterprise Server 15 SP6-LTSS:strongswan-ipsec-5.9.12-150600.3.16.1
Ссылки
- CVE-2026-35333
- SUSE Bug 1261706
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 15 SP6-LTSS:strongswan-5.9.12-150600.3.16.1
SUSE Linux Enterprise Server 15 SP6-LTSS:strongswan-doc-5.9.12-150600.3.16.1
SUSE Linux Enterprise Server 15 SP6-LTSS:strongswan-hmac-5.9.12-150600.3.16.1
SUSE Linux Enterprise Server 15 SP6-LTSS:strongswan-ipsec-5.9.12-150600.3.16.1
Ссылки
- CVE-2026-35334
- SUSE Bug 1261720