UbuntuUpdates.org

Package "strongswan"

Name: strongswan

Description:

IPsec VPN solution metapackage
Latest version: 5.9.13-2ubuntu4.24.04.2
Release: noble (24.04)
Level: updates
Repository: main
Homepage: http://www.strongswan.org

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "strongswan"

All arch deb package
APT INSTALL

Other versions of "strongswan" in Noble

Repository Area Version
base universe 5.9.13-2ubuntu4
base main 5.9.13-2ubuntu4
security universe 5.9.13-2ubuntu4.24.04.2
security main 5.9.13-2ubuntu4.24.04.2
updates universe 5.9.13-2ubuntu4.24.04.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 5.9.13-2ubuntu4.24.04.2 2026-03-24 06:08:48 UTC

  strongswan (5.9.13-2ubuntu4.24.04.2) noble-security; urgency=medium

  * SECURITY UPDATE: Integer Underflow When Handling EAP-TTLS AVP
    - debian/patches/CVE-2026-25075.patch: prevent crash if AVP length
      header field is invalid in
      src/libcharon/plugins/eap_ttls/eap_ttls_avp.c.
    - CVE-2026-25075

 -- Marc Deslauriers <email address hidden> Wed, 11 Mar 2026 09:16:06 -0400
Source diff to previous version
CVE-2026-25075 strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP-TTLS AVP parser that allows unauthenticated remote att

Version: 5.9.13-2ubuntu4.24.04.1 2025-10-28 08:07:25 UTC

  strongswan (5.9.13-2ubuntu4.24.04.1) noble-security; urgency=medium

  * SECURITY UPDATE: Buffer Overflow When Handling EAP-MSCHAPv2 Failure
    Requests
    - debian/patches/CVE-2025-62291.patch: fix length check for Failure
      Request packets on the client in
      src/libcharon/plugins/eap_mschapv2/eap_mschapv2.c.
    - CVE-2025-62291

 -- Marc Deslauriers <email address hidden> Tue, 21 Oct 2025 11:06:11 -0400


About   -   Send Feedback to @ubuntu_updates