OPENSUSE-SU-2026:22050-1: strongswan&distro=openSUSE Leap 16.0 openSUSE

Vulnerability summary

OPENSUSE-SU-2026:22050-1 is a vulnerability in strongswan&distro=openSUSE Leap 16.0 openSUSE with no CVSS score yet.

Timeline

1. 08-10-2026
   PublishedVulnerability first disclosed.
2. 19-10-2026
   Last modifiedVulnerability information updated.

Description

Security update for strongswan This update for strongswan fixes the following issues: - CVE-2026-78123: Undefined Memory Access When Handling PKCS#7 Containers (bsc#1276533). - CVE-2026-78124: Memory Leak When Processing Certificates in PKCS#7 Containers (bsc#1276534). - CVE-2026-78126: NULL-Pointer Dereference When Handling AKA-Synchronization-Failure (bsc#1276536). - CVE-2026-78127: Memory Leak During Message Stringification (bsc#1276539). - CVE-2026-78129: Unbounded Iteration When Decrypting PKCS#7 Containers (bsc#1276540). - CVE-2026-78130: NULL-Pointer Dereference in Attribute Certificate Validation (bsc#1276541). - CVE-2026-78131: Memory Leaks When Parsing Attribute Certificates (bsc#1276543). - CVE-2026-78132: Infinite Loop When Parsing Attribute Certificates (bsc#1276544). - CVE-2026-78133: Use-After-Free During Multi-KE Rekey Collision (bsc#1276545). - CVE-2026-78134: Missing Inner EAP Method Authentication Details (bsc#1276548). - CVE-2026-78135: Creation of a Child SA Pre-Authentication (bsc#1276549).

No weakness data has been published for this record.