CVE catalog

CVE-2025-62291

strongSwan vulnerability

Severity: High · CVSS 8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Published: Jan 1, 2025, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.98% · Oct 25, 2026

In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	strongswan	sid	`6.1.0-2`	fixed
Debian	strongswan	forky	`6.1.0-2`	fixed
Debian	strongswan	trixie	`6.0.1-6+deb13u6`	fixed
Debian	strongswan	trixie-security	`6.0.1-6+deb13u7`	fixed
Debian	strongswan	bookworm	`5.9.8-5+deb12u5`	fixed
Debian	strongswan	bookworm-security	`5.9.8-5+deb12u5`	fixed
Ubuntu	strongswan	noble	`5.9.13-2ubuntu4.24.04.1`	fixed
Ubuntu	charon-cmd	noble	`5.9.13-2ubuntu4.24.04.1`	fixed
Ubuntu	charon-systemd	noble	`5.9.13-2ubuntu4.24.04.1`	fixed
Ubuntu	libcharon-extauth-plugins	noble	`5.9.13-2ubuntu4.24.04.1`	fixed
Ubuntu	libcharon-extra-plugins	noble	`5.9.13-2ubuntu4.24.04.1`	fixed
Ubuntu	libstrongswan	noble	`5.9.13-2ubuntu4.24.04.1`	fixed
Ubuntu	libstrongswan-extra-plugins	noble	`5.9.13-2ubuntu4.24.04.1`	fixed
Ubuntu	libstrongswan-standard-plugins	noble	`5.9.13-2ubuntu4.24.04.1`	fixed
Ubuntu	strongswan-charon	noble	`5.9.13-2ubuntu4.24.04.1`	fixed
Ubuntu	strongswan-libcharon	noble	`5.9.13-2ubuntu4.24.04.1`	fixed
Ubuntu	strongswan-nm	noble	`5.9.13-2ubuntu4.24.04.1`	fixed
Ubuntu	strongswan-pki	noble	`5.9.13-2ubuntu4.24.04.1`	fixed
Ubuntu	strongswan-starter	noble	`5.9.13-2ubuntu4.24.04.1`	fixed
Ubuntu	strongswan-swanctl	noble	`5.9.13-2ubuntu4.24.04.1`	fixed
Ubuntu	strongswan	noble	`5.9.8-5+deb12u2`	fixed
Ubuntu	strongswan	pro	`5.9.5-2ubuntu2.1+Fips1`	vulnerable
Ubuntu	strongswan	pro	`5.9.5-2ubuntu2.2+Fips1`	vulnerable
Ubuntu	strongswan	pro	`5.9.5-2ubuntu2.3+Fips1`	vulnerable
Ubuntu	strongswan	pro	`5.9.5-2ubuntu2.4+Fips1`	fixed
Ubuntu	strongswan	20.04	`5.7.2-1ubuntu3`	vulnerable
Ubuntu	strongswan	20.04	`5.8.1-1ubuntu1`	vulnerable
Ubuntu	strongswan	20.04	`5.8.2-1ubuntu1`	vulnerable
Ubuntu	strongswan	20.04	`5.8.2-1ubuntu2`	vulnerable
Ubuntu	strongswan	20.04	`5.8.2-1ubuntu3`	vulnerable
Ubuntu	strongswan	20.04	`5.8.2-1ubuntu3.1`	vulnerable
Ubuntu	strongswan	20.04	`5.8.2-1ubuntu3.2`	vulnerable
Ubuntu	strongswan	20.04	`5.8.2-1ubuntu3.3`	vulnerable
Ubuntu	strongswan	20.04	`5.8.2-1ubuntu3.4`	vulnerable
Ubuntu	strongswan	20.04	`5.8.2-1ubuntu3.5`	vulnerable
Ubuntu	strongswan	20.04	`5.8.2-1ubuntu3.6`	vulnerable
Ubuntu	strongswan	22.04	`5.9.1-1ubuntu3`	vulnerable
Ubuntu	strongswan	22.04	`5.9.1-1ubuntu3.1`	vulnerable
Ubuntu	strongswan	22.04	`5.9.4-1ubuntu1`	vulnerable
Ubuntu	strongswan	22.04	`5.9.4-1ubuntu2`	vulnerable
Ubuntu	strongswan	22.04	`5.9.4-1ubuntu3`	vulnerable
Ubuntu	strongswan	22.04	`5.9.4-1ubuntu4`	vulnerable
Ubuntu	strongswan	22.04	`5.9.5-2ubuntu1`	vulnerable
Ubuntu	strongswan	22.04	`5.9.5-2ubuntu2`	vulnerable
Ubuntu	strongswan	22.04	`5.9.5-2ubuntu2.1`	vulnerable
Ubuntu	strongswan	22.04	`5.9.5-2ubuntu2.2`	vulnerable
Ubuntu	strongswan	22.04	`5.9.5-2ubuntu2.3`	vulnerable
Ubuntu	strongswan	22.04	`5.9.5-2ubuntu2.4`	fixed
Ubuntu	strongswan	24.04	`5.9.11-1ubuntu1`	vulnerable
Ubuntu	strongswan	24.04	`5.9.11-1ubuntu2`	vulnerable
Ubuntu	strongswan	24.04	`5.9.12-1ubuntu1`	vulnerable
Ubuntu	strongswan	24.04	`5.9.13-2ubuntu1`	vulnerable
Ubuntu	strongswan	24.04	`5.9.13-2ubuntu3`	vulnerable
Ubuntu	strongswan	24.04	`5.9.13-2ubuntu4`	vulnerable
Ubuntu	strongswan	24.04	`5.9.13-2ubuntu4.24.04.1`	fixed
Ubuntu	strongswan	25.10	`5.9.13-2ubuntu4`	vulnerable
Ubuntu	strongswan	25.10	`5.9.13-2ubuntu5`	vulnerable
Ubuntu	strongswan	25.10	`6.0.1-6ubuntu2`	vulnerable
Ubuntu	strongswan	25.10	`6.0.1-6ubuntu4`	vulnerable
Ubuntu	strongswan	25.10	`6.0.1-6ubuntu4.1`	fixed
Ubuntu	strongswan	26.04	`6.0.1-6ubuntu4`	vulnerable
Ubuntu	strongswan	26.04	`6.0.1-6ubuntu5`	fixed
Alpine	strongswan	3.20	`5.9.13-r2`	fixed
Alpine	strongswan	3.21	`5.9.14-r1`	fixed
Alpine	strongswan	3.22	`5.9.14-r1`	fixed
Alpine	strongswan	3.23	`5.9.14-r3`	fixed
Alpine	strongswan	3.24	`5.9.14-r3`	fixed
Ubuntu	strongswan	22.04	`5.9.1-1ubuntu3`	vulnerable
Ubuntu	strongswan	22.04	`5.9.1-1ubuntu3.1`	vulnerable
Ubuntu	strongswan	22.04	`5.9.4-1ubuntu1`	vulnerable
Ubuntu	strongswan	22.04	`5.9.4-1ubuntu2`	vulnerable
Ubuntu	strongswan	22.04	`5.9.4-1ubuntu3`	vulnerable
Ubuntu	strongswan	22.04	`5.9.4-1ubuntu4`	vulnerable
Ubuntu	strongswan	22.04	`5.9.5-2ubuntu1`	vulnerable
Ubuntu	strongswan	22.04	`5.9.5-2ubuntu2`	vulnerable
Ubuntu	strongswan	22.04	`5.9.5-2ubuntu2.1`	vulnerable
Ubuntu	strongswan	22.04	`5.9.5-2ubuntu2.2`	vulnerable
Ubuntu	strongswan	22.04	`5.9.5-2ubuntu2.3`	vulnerable
Ubuntu	strongswan	22.04	`5.9.5-2ubuntu2.4`	fixed
Ubuntu	strongswan	24.04	`5.9.11-1ubuntu1`	vulnerable
Ubuntu	strongswan	24.04	`5.9.11-1ubuntu2`	vulnerable
Ubuntu	strongswan	24.04	`5.9.12-1ubuntu1`	vulnerable
Ubuntu	strongswan	24.04	`5.9.13-2ubuntu1`	vulnerable
Ubuntu	strongswan	24.04	`5.9.13-2ubuntu3`	vulnerable
Ubuntu	strongswan	24.04	`5.9.13-2ubuntu4`	vulnerable
Ubuntu	strongswan	24.04	`5.9.13-2ubuntu4.24.04.1`	fixed
Ubuntu	strongswan	25.10	`5.9.13-2ubuntu4`	vulnerable
Ubuntu	strongswan	25.10	`5.9.13-2ubuntu5`	vulnerable
Ubuntu	strongswan	25.10	`6.0.1-6ubuntu2`	vulnerable
Ubuntu	strongswan	25.10	`6.0.1-6ubuntu4`	vulnerable
Ubuntu	strongswan	25.10	`6.0.1-6ubuntu4.1`	fixed
Opensuse	strongswan	leap 16.0	`6.0.1-160000.3.1`	fixed
Opensuse	strongswan	tumbleweed	`6.0.3-1.1`	fixed
Suse	strongswan	linux enterprise server 12 sp5-ltss	`5.1.3-26.29.1`	fixed
Suse	strongswan	linux enterprise server ltss extended security 12 sp5	`5.1.3-26.29.1`	fixed
Suse	strongswan	linux enterprise high performance computing 15 sp5-espos	`5.9.11-150500.5.9.1`	fixed
Suse	strongswan	linux enterprise high performance computing 15 sp5-ltss	`5.9.11-150500.5.9.1`	fixed
Suse	strongswan	linux enterprise server 15 sp5-ltss	`5.9.11-150500.5.9.1`	fixed
Suse	strongswan	linux enterprise server for sap applications 15 sp5	`5.9.11-150500.5.9.1`	fixed
Suse	strongswan	linux enterprise high performance computing 15 sp3-ltss	`5.8.2-150200.11.45.1`	fixed
Suse	strongswan	linux enterprise server 15 sp3-ltss	`5.8.2-150200.11.45.1`	fixed
Suse	strongswan	linux enterprise server for sap applications 15 sp3	`5.8.2-150200.11.45.1`	fixed
Suse	strongswan	enterprise storage 7.1	`5.8.2-150200.11.45.1`	fixed
Suse	strongswan	linux enterprise high performance computing 15 sp4-espos	`5.9.11-150400.19.20.1`	fixed
Suse	strongswan	linux enterprise high performance computing 15 sp4-ltss	`5.9.11-150400.19.20.1`	fixed
Suse	strongswan	linux enterprise server 15 sp4-ltss	`5.9.11-150400.19.20.1`	fixed
Suse	strongswan	linux enterprise server for sap applications 15 sp4	`5.9.11-150400.19.20.1`	fixed
Suse	strongswan	manager proxy lts 4.3	`5.9.11-150400.19.20.1`	fixed
Suse	strongswan	manager server lts 4.3	`5.9.11-150400.19.20.1`	fixed
Suse	strongswan	linux enterprise server 16.0	`6.0.1-160000.3.1`	fixed
Suse	strongswan	linux enterprise server for sap applications 16.0	`6.0.1-160000.3.1`	fixed
Suse	strongswan	linux enterprise module for basesystem 15 sp6	`5.9.12-150600.3.5.2`	fixed
Suse	strongswan	linux enterprise module for package hub 15 sp6	`5.9.12-150600.3.5.2`	fixed
Suse	strongswan	linux enterprise workstation extension 15 sp6	`5.9.12-150600.3.5.2`	fixed
Opensuse	strongswan	leap 15.6	`5.9.12-150600.3.5.2`	fixed
Suse	strongswan	linux enterprise module for basesystem 15 sp7	`5.9.14-150700.3.3.1`	fixed
Suse	strongswan	linux enterprise module for package hub 15 sp7	`5.9.14-150700.3.3.1`	fixed
Suse	strongswan	linux enterprise workstation extension 15 sp7	`5.9.14-150700.3.3.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	strongswan	source	sid	`6.0.3-1`	not yet assigned	Not reported	[1120004]
Debian	strongswan	source	forky	`6.0.3-1`	not yet assigned	Not reported	[1120004]
Debian	strongswan	source	trixie	`6.0.1-6+deb13u2`	not yet assigned	Not reported	[1120004]
Debian	strongswan	source	bookworm	`5.9.8-5+deb12u2`	not yet assigned	Not reported	[1120004]
Ubuntu	strongswan	deb	noble	`5.9.13-2ubuntu4.24.04.1`	Not reported	Not reported	Not reported
Ubuntu	charon-cmd	deb	noble	`5.9.13-2ubuntu4.24.04.1`	Not reported	Not reported	Not reported
Ubuntu	charon-systemd	deb	noble	`5.9.13-2ubuntu4.24.04.1`	Not reported	Not reported	Not reported
Ubuntu	libcharon-extauth-plugins	deb	noble	`5.9.13-2ubuntu4.24.04.1`	Not reported	Not reported	Not reported
Ubuntu	libcharon-extra-plugins	deb	noble	`5.9.13-2ubuntu4.24.04.1`	Not reported	Not reported	Not reported
Ubuntu	libstrongswan	deb	noble	`5.9.13-2ubuntu4.24.04.1`	Not reported	Not reported	Not reported
Ubuntu	libstrongswan-extra-plugins	deb	noble	`5.9.13-2ubuntu4.24.04.1`	Not reported	Not reported	Not reported
Ubuntu	libstrongswan-standard-plugins	deb	noble	`5.9.13-2ubuntu4.24.04.1`	Not reported	Not reported	Not reported
Ubuntu	strongswan-charon	deb	noble	`5.9.13-2ubuntu4.24.04.1`	Not reported	Not reported	Not reported
Ubuntu	strongswan-libcharon	deb	noble	`5.9.13-2ubuntu4.24.04.1`	Not reported	Not reported	Not reported
Ubuntu	strongswan-nm	deb	noble	`5.9.13-2ubuntu4.24.04.1`	Not reported	Not reported	Not reported
Ubuntu	strongswan-pki	deb	noble	`5.9.13-2ubuntu4.24.04.1`	Not reported	Not reported	Not reported
Ubuntu	strongswan-starter	deb	noble	`5.9.13-2ubuntu4.24.04.1`	Not reported	Not reported	Not reported
Ubuntu	strongswan-swanctl	deb	noble	`5.9.13-2ubuntu4.24.04.1`	Not reported	Not reported	Not reported
Ubuntu	strongswan	deb	noble	`5.9.8-5+deb12u2`	Not reported	Not reported	Not reported
Ubuntu	strongswan	deb	pro	`5.9.5-2ubuntu2.4+Fips1`	Not reported	UBUNTU-CVE-2025-62291	Not reported
Ubuntu	strongswan	deb	22.04	`5.9.5-2ubuntu2.4`	Not reported	UBUNTU-CVE-2025-62291	Not reported
Ubuntu	strongswan	deb	24.04	`5.9.13-2ubuntu4.24.04.1`	Not reported	UBUNTU-CVE-2025-62291	Not reported
Ubuntu	strongswan	deb	25.10	`6.0.1-6ubuntu4.1`	Not reported	UBUNTU-CVE-2025-62291	Not reported
Ubuntu	strongswan	deb	26.04	`6.0.1-6ubuntu5`	Not reported	UBUNTU-CVE-2025-62291	Not reported
Alpine	strongswan	apk	3.20	`5.9.13-r2`	Not reported	ALPINE-CVE-2025-62291	Not reported
Alpine	strongswan	apk	3.21	`5.9.14-r1`	Not reported	ALPINE-CVE-2025-62291	Not reported
Alpine	strongswan	apk	3.22	`5.9.14-r1`	Not reported	ALPINE-CVE-2025-62291	Not reported
Alpine	strongswan	apk	3.23	`5.9.14-r3`	Not reported	ALPINE-CVE-2025-62291	Not reported
Alpine	strongswan	apk	3.24	`5.9.14-r3`	Not reported	ALPINE-CVE-2025-62291	Not reported
Ubuntu	strongswan	deb	22.04	`5.9.5-2ubuntu2.4`	Not reported	USN-7841-1	Not reported
Ubuntu	strongswan	deb	24.04	`5.9.13-2ubuntu4.24.04.1`	Not reported	USN-7841-1	Not reported
Ubuntu	strongswan	deb	25.10	`6.0.1-6ubuntu4.1`	Not reported	USN-7841-1	Not reported
Opensuse	strongswan	rpm	leap 16.0	`6.0.1-160000.3.1`	Not reported	OPENSUSE-SU-2025:20132-1	Not reported
Opensuse	strongswan	rpm	tumbleweed	`6.0.3-1.1`	Not reported	OPENSUSE-SU-2025:15681-1	Not reported
Suse	strongswan	rpm	linux enterprise server 12 sp5-ltss	`5.1.3-26.29.1`	Not reported	SUSE-SU-2025:3904-1	Not reported
Suse	strongswan	rpm	linux enterprise server ltss extended security 12 sp5	`5.1.3-26.29.1`	Not reported	SUSE-SU-2025:3904-1	Not reported
Suse	strongswan	rpm	linux enterprise high performance computing 15 sp5-espos	`5.9.11-150500.5.9.1`	Not reported	SUSE-SU-2025:3873-1	Not reported
Suse	strongswan	rpm	linux enterprise high performance computing 15 sp5-ltss	`5.9.11-150500.5.9.1`	Not reported	SUSE-SU-2025:3873-1	Not reported
Suse	strongswan	rpm	linux enterprise server 15 sp5-ltss	`5.9.11-150500.5.9.1`	Not reported	SUSE-SU-2025:3873-1	Not reported
Suse	strongswan	rpm	linux enterprise server for sap applications 15 sp5	`5.9.11-150500.5.9.1`	Not reported	SUSE-SU-2025:3873-1	Not reported
Suse	strongswan	rpm	linux enterprise high performance computing 15 sp3-ltss	`5.8.2-150200.11.45.1`	Not reported	SUSE-SU-2025:3857-1	Not reported
Suse	strongswan	rpm	linux enterprise server 15 sp3-ltss	`5.8.2-150200.11.45.1`	Not reported	SUSE-SU-2025:3857-1	Not reported
Suse	strongswan	rpm	linux enterprise server for sap applications 15 sp3	`5.8.2-150200.11.45.1`	Not reported	SUSE-SU-2025:3857-1	Not reported
Suse	strongswan	rpm	enterprise storage 7.1	`5.8.2-150200.11.45.1`	Not reported	SUSE-SU-2025:3857-1	Not reported
Suse	strongswan	rpm	linux enterprise high performance computing 15 sp4-espos	`5.9.11-150400.19.20.1`	Not reported	SUSE-SU-2025:3856-1	Not reported
Suse	strongswan	rpm	linux enterprise high performance computing 15 sp4-ltss	`5.9.11-150400.19.20.1`	Not reported	SUSE-SU-2025:3856-1	Not reported
Suse	strongswan	rpm	linux enterprise server 15 sp4-ltss	`5.9.11-150400.19.20.1`	Not reported	SUSE-SU-2025:3856-1	Not reported
Suse	strongswan	rpm	linux enterprise server for sap applications 15 sp4	`5.9.11-150400.19.20.1`	Not reported	SUSE-SU-2025:3856-1	Not reported
Suse	strongswan	rpm	manager proxy lts 4.3	`5.9.11-150400.19.20.1`	Not reported	SUSE-SU-2025:3856-1	Not reported
Suse	strongswan	rpm	manager server lts 4.3	`5.9.11-150400.19.20.1`	Not reported	SUSE-SU-2025:3856-1	Not reported
Suse	strongswan	rpm	linux enterprise server 16.0	`6.0.1-160000.3.1`	Not reported	SUSE-SU-2025:21167-1	Not reported
Suse	strongswan	rpm	linux enterprise server for sap applications 16.0	`6.0.1-160000.3.1`	Not reported	SUSE-SU-2025:21167-1	Not reported
Suse	strongswan	rpm	linux enterprise module for basesystem 15 sp6	`5.9.12-150600.3.5.2`	Not reported	SUSE-SU-2025:3855-1	Not reported
Suse	strongswan	rpm	linux enterprise module for package hub 15 sp6	`5.9.12-150600.3.5.2`	Not reported	SUSE-SU-2025:3855-1	Not reported
Suse	strongswan	rpm	linux enterprise workstation extension 15 sp6	`5.9.12-150600.3.5.2`	Not reported	SUSE-SU-2025:3855-1	Not reported
Opensuse	strongswan	rpm	leap 15.6	`5.9.12-150600.3.5.2`	Not reported	SUSE-SU-2025:3855-1	Not reported
Suse	strongswan	rpm	linux enterprise module for basesystem 15 sp7	`5.9.14-150700.3.3.1`	Not reported	SUSE-SU-2025:3834-1	Not reported
Suse	strongswan	rpm	linux enterprise module for package hub 15 sp7	`5.9.14-150700.3.3.1`	Not reported	SUSE-SU-2025:3834-1	Not reported
Suse	strongswan	rpm	linux enterprise workstation extension 15 sp7	`5.9.14-150700.3.3.1`	Not reported	SUSE-SU-2025:3834-1	Not reported

[Debian bug #1120004]

OpenFactory catalog packages

[openSUSE Tumbleweed]

[strongswan-doc]Unknown
Source package: [strongswan]
Details (1)
- 6.0.7-1.3 · noarch · tumbleweed
  Unknown · Fixed: 6.0.3-1.1
  Version impact unknown
  usn · strongswan · opensuse · tumbleweed
[strongswan-fips]Unknown
Source package: [strongswan]
Details (1)
- 6.0.7-1.3 · x86_64 · tumbleweed
  Unknown · Fixed: 6.0.3-1.1
  Version impact unknown
  usn · strongswan · opensuse · tumbleweed
[strongswan-ipsec]Unknown
Source package: [strongswan]
Details (1)
- 6.0.7-1.3 · x86_64 · tumbleweed
  Unknown · Fixed: 6.0.3-1.1
  Version impact unknown
  usn · strongswan · opensuse · tumbleweed
[strongswan-mysql]Unknown
Source package: [strongswan]
Details (1)
- 6.0.7-1.3 · x86_64 · tumbleweed
  Unknown · Fixed: 6.0.3-1.1
  Version impact unknown
  usn · strongswan · opensuse · tumbleweed
[strongswan-nm]Unknown
Source package: [strongswan]
Details (1)
- 6.0.7-1.3 · x86_64 · tumbleweed
  Unknown · Fixed: 6.0.3-1.1
  Version impact unknown
  usn · strongswan · opensuse · tumbleweed
[strongswan-sqlite]Unknown
Source package: [strongswan]
Details (1)
- 6.0.7-1.3 · x86_64 · tumbleweed
  Unknown · Fixed: 6.0.3-1.1
  Version impact unknown
  usn · strongswan · opensuse · tumbleweed

[Debian 12 (Bookworm)]

[charon-cmd]Fixed
Source package: [strongswan]
Details (4)
- 5.9.8-5+deb12u5 · amd64 · bookworm
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · amd64 · bookworm-security
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm-security
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
[charon-systemd]Fixed
Source package: [strongswan]
Details (4)
- 5.9.8-5+deb12u5 · amd64 · bookworm
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · amd64 · bookworm-security
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm-security
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
[libcharon-extauth-plugins]Fixed
Source package: [strongswan]
Details (4)
- 5.9.8-5+deb12u5 · amd64 · bookworm
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · amd64 · bookworm-security
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm-security
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
[libcharon-extra-plugins]Fixed
Source package: [strongswan]
Details (4)
- 5.9.8-5+deb12u5 · amd64 · bookworm
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · amd64 · bookworm-security
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm-security
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
[libstrongswan]Fixed
Source package: [strongswan]
Details (4)
- 5.9.8-5+deb12u5 · amd64 · bookworm
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · amd64 · bookworm-security
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm-security
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
[libstrongswan-extra-plugins]Fixed
Source package: [strongswan]
Details (4)
- 5.9.8-5+deb12u5 · amd64 · bookworm
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · amd64 · bookworm-security
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm-security
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
[libstrongswan-standard-plugins]Fixed
Source package: [strongswan]
Details (4)
- 5.9.8-5+deb12u5 · amd64 · bookworm
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · amd64 · bookworm-security
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm-security
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
[strongswan]Fixed
Details (4)
- 5.9.8-5+deb12u5 · all · bookworm
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · all · bookworm
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · all · bookworm-security
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · all · bookworm-security
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
[strongswan-charon]Fixed
Source package: [strongswan]
Details (4)
- 5.9.8-5+deb12u5 · amd64 · bookworm
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · amd64 · bookworm-security
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm-security
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
[strongswan-libcharon]Fixed
Source package: [strongswan]
Details (4)
- 5.9.8-5+deb12u5 · amd64 · bookworm
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · amd64 · bookworm-security
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm-security
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
[strongswan-nm]Fixed
Source package: [strongswan]
Details (4)
- 5.9.8-5+deb12u5 · amd64 · bookworm
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · amd64 · bookworm-security
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm-security
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
[strongswan-pki]Fixed
Source package: [strongswan]
Details (4)
- 5.9.8-5+deb12u5 · amd64 · bookworm
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · amd64 · bookworm-security
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm-security
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
[strongswan-starter]Fixed
Source package: [strongswan]
Details (4)
- 5.9.8-5+deb12u5 · amd64 · bookworm
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · amd64 · bookworm-security
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm-security
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
[strongswan-swanctl]Fixed
Source package: [strongswan]
Details (4)
- 5.9.8-5+deb12u5 · amd64 · bookworm
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · amd64 · bookworm-security
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12
- 5.9.8-5+deb12u5 · arm64 · bookworm-security
  Fixed · Fixed: 5.9.8-5+deb12u2
  usn · strongswan · debian · bookworm; usn · strongswan · debian · 12

Next results

Observed: Oct 27, 2026, 6:39:13 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]