{"schema_version":"1.7.2","id":"OESA-2026-3299","modified":"2026-08-07T02:44:53Z","published":"2026-08-07T02:44:53Z","upstream":["CVE-2026-14957"],"summary":"libreswan security update","details":"Libreswan is an implementation of IKEv1 and IKEv2 for IPsec. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services.  These services allow you to build secure tunnels through untrusted networks.  Everything passing through the untrusted net is encrypted by the ipsec gateway machine and decrypted by the gateway at the other end of the tunnel.  The resulting tunnel is a virtual private network or VPN.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in libreswan. A badly formatted X.509 certificate can cause an assertion failure (CWE-617) that crashes the pluto daemon process, leading to a denial of service.(CVE-2026-14957)","affected":[{"package":{"ecosystem":"openEuler:24.03-LTS-SP3","name":"libreswan","purl":"pkg:rpm/openEuler/libreswan&distro=openEuler-24.03-LTS-SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15-4.oe2403sp3"}]}],"ecosystem_specific":{"aarch64":["libreswan-4.15-4.oe2403sp3.aarch64.rpm","libreswan-debuginfo-4.15-4.oe2403sp3.aarch64.rpm","libreswan-debugsource-4.15-4.oe2403sp3.aarch64.rpm"],"noarch":["libreswan-help-4.15-4.oe2403sp3.noarch.rpm"],"src":["libreswan-4.15-4.oe2403sp3.src.rpm"],"x86_64":["libreswan-4.15-4.oe2403sp3.x86_64.rpm","libreswan-debuginfo-4.15-4.oe2403sp3.x86_64.rpm","libreswan-debugsource-4.15-4.oe2403sp3.x86_64.rpm"]}},{"package":{"ecosystem":"openEuler:24.03-LTS-SP4","name":"libreswan","purl":"pkg:rpm/openEuler/libreswan&distro=openEuler-24.03-LTS-SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15-4.oe2403sp4"}]}],"ecosystem_specific":{"aarch64":["libreswan-4.15-4.oe2403sp4.aarch64.rpm","libreswan-debuginfo-4.15-4.oe2403sp4.aarch64.rpm","libreswan-debugsource-4.15-4.oe2403sp4.aarch64.rpm"],"noarch":["libreswan-help-4.15-4.oe2403sp4.noarch.rpm"],"src":["libreswan-4.15-4.oe2403sp4.src.rpm"],"x86_64":["libreswan-4.15-4.oe2403sp4.x86_64.rpm","libreswan-debuginfo-4.15-4.oe2403sp4.x86_64.rpm","libreswan-debugsource-4.15-4.oe2403sp4.x86_64.rpm"]}},{"package":{"ecosystem":"openEuler:20.03-LTS-SP4","name":"libreswan","purl":"pkg:rpm/openEuler/libreswan&distro=openEuler-20.03-LTS-SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15-4.oe2003sp4"}]}],"ecosystem_specific":{"aarch64":["libreswan-4.15-4.oe2003sp4.aarch64.rpm","libreswan-debuginfo-4.15-4.oe2003sp4.aarch64.rpm","libreswan-debugsource-4.15-4.oe2003sp4.aarch64.rpm"],"noarch":["libreswan-help-4.15-4.oe2003sp4.noarch.rpm"],"src":["libreswan-4.15-4.oe2003sp4.src.rpm"],"x86_64":["libreswan-4.15-4.oe2003sp4.x86_64.rpm","libreswan-debuginfo-4.15-4.oe2003sp4.x86_64.rpm","libreswan-debugsource-4.15-4.oe2003sp4.x86_64.rpm"]}},{"package":{"ecosystem":"openEuler:22.03-LTS-SP4","name":"libreswan","purl":"pkg:rpm/openEuler/libreswan&distro=openEuler-22.03-LTS-SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15-4.oe2203sp4"}]}],"ecosystem_specific":{"aarch64":["libreswan-4.15-4.oe2203sp4.aarch64.rpm","libreswan-debuginfo-4.15-4.oe2203sp4.aarch64.rpm","libreswan-debugsource-4.15-4.oe2203sp4.aarch64.rpm"],"noarch":["libreswan-help-4.15-4.oe2203sp4.noarch.rpm"],"src":["libreswan-4.15-4.oe2203sp4.src.rpm"],"x86_64":["libreswan-4.15-4.oe2203sp4.x86_64.rpm","libreswan-debuginfo-4.15-4.oe2203sp4.x86_64.rpm","libreswan-debugsource-4.15-4.oe2203sp4.x86_64.rpm"]}},{"package":{"ecosystem":"openEuler:24.03-LTS-SP1","name":"libreswan","purl":"pkg:rpm/openEuler/libreswan&distro=openEuler-24.03-LTS-SP1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15-4.oe2403sp1"}]}],"ecosystem_specific":{"aarch64":["libreswan-4.15-4.oe2403sp1.aarch64.rpm","libreswan-debuginfo-4.15-4.oe2403sp1.aarch64.rpm","libreswan-debugsource-4.15-4.oe2403sp1.aarch64.rpm"],"noarch":["libreswan-help-4.15-4.oe2403sp1.noarch.rpm"],"src":["libreswan-4.15-4.oe2403sp1.src.rpm"],"x86_64":["libreswan-4.15-4.oe2403sp1.x86_64.rpm","libreswan-debuginfo-4.15-4.oe2403sp1.x86_64.rpm","libreswan-debugsource-4.15-4.oe2403sp1.x86_64.rpm"]}}],"references":[{"type":"ADVISORY","url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3299"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14957"}],"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"database_specific":{"severity":"High"}}