RLSA-2026:46398 Important: libreswan security update

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network VPN...

CVE-2026-50722

A flaw was found in Libreswan's implementation of IKEv2 authentication when processing signatures utilizing the RSASSA-PKCS1-v15 scheme. The RSAauthenticatehashsignaturepkcs115rsa function does not correctly validate the DER encoding of the ASN.1 digest. A remote, unauthenticated attacker could...

Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2026-12413)

The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-12413 advisory. - An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart...

Linux Distros Unpatched Vulnerability : CVE-2026-12413

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The functi...

MiracleLinux 8 : libreswan-4.4-4.el8 (AXSA:2022-2989:01)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2022-2989:01 advisory. libreswan: Malicious IKEv1 packet can cause libreswan to restart CVE-2022-23094 Tenable has extracted the preceding description block directly from the...

MiracleLinux 8 : libreswan-4.5-1.el8.1 (AXSA:2023-5324:01)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-5324:01 advisory. libreswan: Malicious IKEv1 Aggressive Mode packets can crash libreswan CVE-2023-30570 Tenable has extracted the preceding description block directly from the...

EUVD-2013-7071

Malware in sbrugna...

EUVD-2019-3949

Malware in sbrugna...

EUVD-2016-6312

Malware in sbrugna...

EUVD-2015-3270

Malware in sbrugna...

EUVD-2015-3296

Malware in sbrugna...

EUVD-2013-2034

Malware in sbrugna...

EUVD-2016-6340

Malware in sbrugna...

EUVD-2016-4142

Malware in sbrugna...

EUVD-2023-42487

Malicious code in bioql PyPI...

EUVD-2023-34951

Malicious code in bioql PyPI...

EUVD-2023-27109

Malicious code in bioql PyPI...

EUVD-2022-28199

Malicious code in bioql PyPI...

EUVD-2023-33801

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2023-23009

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Libreswan 4.9 allows remote attackers to cause a denial of service assert failure and daemon restart via crafted TS payload with an incorrect selector length...