Linuxsecurity Multiple Vulnerabilities in strongSwan Addressed in Recent Updates
Article Content
- •Multiple critical vulnerabilities in strongSwan have been patched.
- •Affected CVEs include CVE-2026-35328 and CVE-2026-35329.
- •Users of SUSE and Ubuntu 26.04 LTS are advised to update immediately.
Recent updates for strongSwan, affecting SUSE and Ubuntu systems, have addressed several critical vulnerabilities. The issues include CVE-2026-35328, which can cause an infinite loop in TLS processing, and CVE-2026-35329, leading to a null pointer dereference in PKCS#7 processing. Other vulnerabilities include integer underflows and improper certificate handling, which could allow attackers to exploit these weaknesses for denial of service or other malicious activities. The vulnerabilities affect various versions of strongSwan used in Ubuntu 26.04 LTS and SUSE systems. Security patches are available, and users are urged to update their systems promptly to mitigate risks. The updates were released on April 27 and April 28, 2026, respectively, highlighting the urgency of addressing these security flaws.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Ubuntu and CVE-2026-35328 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…