Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges

Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

Fedora 44 Libreswan 5.3.2 Critical Update CVE-2026-14957

fedora
Calendar Grey July 20, 2026
Scroller Fedora
Update for Libreswan 5.3.2 addresses critical CVE-2026-14957 for improved IPsec security on Fedora 44.
Update to 5.3.2 for CVE-2026-14957 (with newsources)

Summary

Libreswan is a free implementation of IPsec & IKE for Linux. IPsec is

the Internet Protocol Security and uses strong cryptography to provide

both authentication and encryption services. These services allow you

to build secure tunnels through untrusted networks. Everything passing

through the untrusted net is encrypted by the ipsec gateway machine and

decrypted by the gateway at the other end of the tunnel. The resulting

tunnel is a virtual private network or VPN.

This package contains the daemons and userland tools for setting up

Libreswan.

Libreswan also supports IKEv2 (RFC7296) and Secure Labeling

Libreswan is based on Openswan-2.6.38 which in turn is based on FreeS/WAN-2.04

Update Information:

Update to 5.3.2 for CVE-2026-14957 (with newsources)

Topics%20covered

Topics Covered

security advisory denial of service fedora critical libreswan CVE-2026-14957

Change Log

* Fri Jul 17 2026 Paul Wouters - 5.3.2-2 - Update to 5.3.2 for CVE-2026-14957 (with newsources) * Fri Jul 17 2026 Paul Wouters - 5.3.2-1 - Update to 5.3.2 for CVE-2026-14957 * Thu Jul 16 2026 Fedora Release Engineering - 5.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Wed Jun 24 2026 Paul Wouters - 5.3.1-1 - Update to libreswan-5.3.1

References

Fedora Update Notification FEDORA-2026-538c26f96a 2026-07-21 00:56:03.169768+00:00 Name : libreswan Product : Fedora 44 Version : 5.3.2 Release : 2.fc44 URL : https://libreswan.org/ Summary : Internet Key Exchange (IKEv1 and IKEv2) implementation for IPsec Description : Libreswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the untrusted net is encrypted by the ipsec gateway machine and decrypted by the gateway at the other end of the tunnel. The resulting tunnel is a virtual private network or VPN. This package contains the daemons and userland tools for setting up Libreswan. Libreswan also supports IKEv2 (RFC7296) and Secure Labeling Libreswan is based on Openswan-2.6.38 which in turn is based on FreeS/WAN-2.04

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-538c26f96a' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: libreswan
Product: Fedora 44
Version: 5.3.2
Release: 2.fc44
URL: https://libreswan.org/
Summary: Internet Key Exchange (IKEv1 and IKEv2) implementation for IPsec

Topics%20covered

Topics Covered

security advisory denial of service fedora critical libreswan CVE-2026-14957

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.