Bug#1143067: libreswan: CVE-2026-14957

Salvatore Bonaccorso <[email protected]> Thu, 30 Jul 2026 07:24:23 +0200

Newsgroups	gmane.linux.debian.devel.bugs.rc
Message-ID	<178538906379.1158530.17957285349662258932.reportbug__34538.6594811984$1785389238$gmane$org@eldamar.lan>

Source: libreswan
Version: 5.2-2.4
Severity: grave
Tags: security upstream
Justification: user security hole
X-Debbugs-Cc: [email protected], Debian Security Team <[email protected]>

Hi,

The following vulnerability was published for libreswan.

CVE-2026-14957[0]:
| IPS mode assertion failure malicious CERT payload


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2026-14957
    https://www.cve.org/CVERecord?id=CVE-2026-14957
[1] https://libreswan.org/security/CVE-2026-14957/CVE-2026-14957.txt

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore