Critical Security Update for Libreswan: Addressing Multiple Vulnerabilities
Summary
RHSA-2026:84887: Red Hat Security Advisory: libreswan security update. Affects libreswan versions < 0:4.3-6.el8_4.2. Fixed in 0:4.3-6.el8_4.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Libreswan is an open-source implementation of the Internet Key Exchange (IKE) and IPsec protocols, providing secure communication over the internet. It is widely used for establishing Virtual Private Networks (VPNs) and ensuring data integrity and confidentiality. The package is essential for organizations relying on secure remote access and secure site-to-site connections. However, recent vulnerabilities have been identified that could potentially compromise the security of systems utilizing Libreswan.
Vulnerability Detail
The vulnerabilities identified in Libreswan, specifically CVE-2026-14957, CVE-2026-50721, and CVE-2026-50722, stem from flaws in the handling of certain cryptographic operations and configurations. These vulnerabilities could allow an attacker to exploit the system, leading to unauthorized access or denial of service. The ramifications include potential data breaches and disruption of secure communications, making it critical for users to address these issues promptly.
How To Fix
Minimum fixed version
0:4.3-6.el8_4.2
This is the first release that contains the fix.
sudo dnf update libreswanTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit access to the Libreswan service by implementing firewall rules to restrict incoming connections until the update can be applied. For example, you can use the following command to block all incoming traffic to the Libreswan port:
sudo firewall-cmd --zone=public --add-port=500/udp --permanent' followed by 'sudo firewall-cmd --reload'.
Conclusion
The identified vulnerabilities in Libreswan pose significant risks to secure communications. It is crucial for users to update to the latest patched version to mitigate these risks. Implementing temporary workarounds can help protect systems until updates are applied.
See every vulnerability recorded for libreswan →
FAQ
The vulnerabilities include CVE-2026-14957, CVE-2026-50721, and CVE-2026-50722, which affect cryptographic operations and configurations.
The CVSS score for these vulnerabilities is 7.5, indicating a high severity level.
You can use the Vulert playground at Vulert Scanner to check if your application is affected without needing to sign up.
If an immediate update is not possible, implement firewall rules to restrict access to the Libreswan service as a temporary workaround.
More information can be found on the Red Hat security advisory page and the official Libreswan documentation.
Related vulnerabilities
Recent vulnerabilities recorded for libreswan.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.