Ubuntu 26.04 LTS strongSwan Advisory USN-8196-2 CVE-2026-35328 to 35334

Several security issues were fixed in strongSwan.

Software Description:

Details:

USN-8196-1 fixed vulnerabilities in strongSwan. This update provides the

corresponding update to Ubuntu 26.04 LTS.

Original advisory details:

Haruto Kimura discovered that strongSwan incorrectly handled the

supported_versions extension in TLS. A remote attacker could possibly use

this issue to cause strongSwan to stop responding, resulting in a denial

of service. (CVE-2026-35328)

Haruto Kimura discovered that strongSwan incorrectly handled certain

encrypted PKCS#7 containers. A remote attacker could possibly use this

issue to cause strongSwan to crash, resulting in a denial of service.

(CVE-2026-35329)

Lukas Johannes Moeller discovered that strongSwan incorrectly handled

certain EAP-SIM/AKA attributes. A remote attacker could use this issue to

cause strongSwan to stop responding, resulting in a denial of service, or

possibly execute arbitrary code. (CVE-2026-35330)

Haruto Kimura di...