Ubuntu alert USN-8117-1 (strongswan)

From:
             
 
noreply+usn-bot@canonical.com
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8117-1] strongSwan vulnerability
Date:
             
 
Mon, 23 Mar 2026 19:37:44 +0000
Message-ID:
             
 
<E1w4l5s-0004Ss-E2@lists.ubuntu.com>
==========================================================================
Ubuntu Security Notice USN-8117-1
March 23, 2026

strongswan vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

strongSwan could be made to consume resources or crash if it received
specially crafted network traffic.

Software Description:
- strongswan: IPsec VPN solution

Details:

Kazuma Matsumoto discovered that strongSwan incorrectly handled EAP-TTLS
AVPs when using the eap-ttls plugin. An attacker could possibly use this
issue to cause strongSwan to consume resources and crash, resulting in a
denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
  libstrongswan                   6.0.1-6ubuntu4.2
  strongswan                      6.0.1-6ubuntu4.2

Ubuntu 24.04 LTS
  libstrongswan                   5.9.13-2ubuntu4.24.04.2
  strongswan                      5.9.13-2ubuntu4.24.04.2

Ubuntu 22.04 LTS
  libstrongswan                   5.9.5-2ubuntu2.5
  strongswan                      5.9.5-2ubuntu2.5

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8117-1
  CVE-2026-25075

Package Information:
  https://launchpad.net/ubuntu/+source/strongswan/6.0.1-6ub...
  https://launchpad.net/ubuntu/+source/strongswan/5.9.13-2u...
  https://launchpad.net/ubuntu/+source/strongswan/5.9.5-2ub...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=OtxY
-----END PGP SIGNATURE-----