[CLSA-2026:1792158739] libreswan: Fix of CVE-2026-77207
Type:
security
Severity:
Important
Release date:
2026-10-16 13:52:31 UTC
Description:
- CVE-2026-77207: fix a pre-auth NULL pointer dereference in decode_cert_payloads() when a PKCS#7 wrapped CERT payload carries no certificate list (CRL-only or non-SignedData content)
CVEs fixed:
Updated packages:
  • libreswan-4.12-2.el9_2.tuxcare.els6.aarch64.rpm
    sha:4eeb584e0c044d293bff0594c38fb33d8182d4a69d2e2b1963f9d27ba45efd11
  • libreswan-4.12-2.el9_2.tuxcare.els6.i686.rpm
    sha:464234935d41dc88e8e9a644dcc398b44f4c0009856731802194146866cab7c2
  • libreswan-4.12-2.el9_2.tuxcare.els6.x86_64.rpm
    sha:6af8f22e4366e49c6a6247ed06a79e484659fdc971c45ae9542bf4dadcf30c58
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.