BSD PortsstrongSwan -- multiple vulnerabilities
· CVE-2026-78123, CVE-2026-78124, CVE-2026-78126, CVE-2026-78127, CVE-2026-78129, CVE-2026-78130, CVE-2026-78131, CVE-2026-78132, CVE-2026-78133, CVE-2026-78134, CVE-2026-78135 · VuXML entry
The strongSwan project reports: strongSwan 6.1.0 fixes eleven vulnerabilities: CVE-2026-78123: A flaw in the openssl plugin in the processing of PKCS#7 containers can result in a crash. Affects 5.0.2 and newer. CVE-2026-78124: A flaw in the openssl plugin in the enumeration of certificates in PKCS#7 containers can result in memory leaks. Affects 5.0.2 and newer. CVE-2026-78126: A flaw in the eap-aka plugin in the …
Affected versions
- strongswan < 6.1.0
By system
0 still vulnerable, 1 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.
| System | Port | Version | State | Fixed |
|---|---|---|---|---|
| FreeBSD | security/strongswan | 6.1.0 | fixed | (3 days after) |
| OpenBSD | net/strongswan | 5.9.1p0 | in range, by version | |
| NetBSD | wip/strongswan | 5.7.1 | not listed |