Ubuntu 26.04 LTS strongSwan Critical DoS Risk USN-8407-1

ubuntu

June 8, 2026

strongSwan could be made to crash or run programs if it received specially crafted network traffic.

Summary

strongSwan could be made to crash or run programs if it received specially

crafted network traffic.

Software Description:

- strongswan: IPsec VPN solution

Details:

Elliott Childre discovered that strongSwan incorrectly handled the cloning

of certain identities. A remote attacker could use this issue to cause

strongSwan to crash, resulting in a denial of service, or possibly execute

arbitrary code.

Topics Covered

security advisory denial of service critical remote access Ubuntu strongSwan

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  libstrongswan                   6.0.4-1ubuntu3.1
  strongswan                      6.0.4-1ubuntu3.1

Ubuntu 25.10
  libstrongswan                   6.0.1-6ubuntu4.4
  strongswan                      6.0.1-6ubuntu4.4

Ubuntu 24.04 LTS
  libstrongswan                   5.9.13-2ubuntu4.24.04.4
  strongswan                      5.9.13-2ubuntu4.24.04.4

Ubuntu 22.04 LTS
  libstrongswan                   5.9.5-2ubuntu2.7
  strongswan                      5.9.5-2ubuntu2.7

In general, a standard system update will make all the necessary changes.