gpp_maybe
Security update for strongswan
SUSE-SLES-16.0-570
This update for strongswan fixes the following issues: Update to strongswan 6.0.4: - CVE-2025-9615: NetworkManager File Access (bsc#1257359). - CVE-2026-25075: Integer Underflow When Handling EAP-TTLS AVP (bsc#1259472). Changes for strongswan: - Fixed a vulnerability in the NetworkManager plugin that potentially allows using credentials of other local users. This vulnerability has been registered as CVE-2025-9615. - The maximum supported length for section names in swanctl.conf has been increased to the upper limit of 256 characters that's enforced by VICI. - Prevent a crash if a confused peer rekeys a Child SA twice before sending a delete. - Fixed a memory leak if a peer's self-signed certificate is untrusted.
-
Release DateApr 16 2026
-
References
-
Typesecurity
-
Severityimportant
cloud_download Downloads
SUSE Linux Enterprise Server 16.0 aarch64
-
Packagesstrongswan
IPsec-based VPN solutionstrongswan-doc6.0.4-160000.1.1 lock rpm
Documentation for strongSwanstrongswan-fips6.0.4-160000.1.1 lock rpm
Config file to disable non FIPS-140-2 algos in strongSwanstrongswan-ipsec6.0.4-160000.1.1 lock rpm
Old-style "ipsec" interface (stroke/starter) for strongSwanstrongswan-mysql6.0.4-160000.1.1 lock rpm
MySQL plugin for strongSwanstrongswan-nm6.0.4-160000.1.1 lock rpm
NetworkManager plugin for strongSwanstrongswan-sqlite6.0.4-160000.1.1 lock rpm
SQLite plugin for strongSwan6.0.4-160000.1.1 lock rpm
SUSE Linux Enterprise Server 16.0 ppc64le
-
Packagesstrongswan
IPsec-based VPN solutionstrongswan-doc6.0.4-160000.1.1 lock rpm
Documentation for strongSwanstrongswan-fips6.0.4-160000.1.1 lock rpm
Config file to disable non FIPS-140-2 algos in strongSwanstrongswan-ipsec6.0.4-160000.1.1 lock rpm
Old-style "ipsec" interface (stroke/starter) for strongSwanstrongswan-mysql6.0.4-160000.1.1 lock rpm
MySQL plugin for strongSwanstrongswan-nm6.0.4-160000.1.1 lock rpm
NetworkManager plugin for strongSwanstrongswan-sqlite6.0.4-160000.1.1 lock rpm
SQLite plugin for strongSwan6.0.4-160000.1.1 lock rpm
SUSE Linux Enterprise Server 16.0 s390x
-
Packagesstrongswan
IPsec-based VPN solutionstrongswan-doc6.0.4-160000.1.1 lock rpm
Documentation for strongSwanstrongswan-fips6.0.4-160000.1.1 lock rpm
Config file to disable non FIPS-140-2 algos in strongSwanstrongswan-ipsec6.0.4-160000.1.1 lock rpm
Old-style "ipsec" interface (stroke/starter) for strongSwanstrongswan-mysql6.0.4-160000.1.1 lock rpm
MySQL plugin for strongSwanstrongswan-nm6.0.4-160000.1.1 lock rpm
NetworkManager plugin for strongSwanstrongswan-sqlite6.0.4-160000.1.1 lock rpm
SQLite plugin for strongSwan6.0.4-160000.1.1 lock rpm
SUSE Linux Enterprise Server 16.0 x86_64
-
Packagesstrongswan
IPsec-based VPN solutionstrongswan-doc6.0.4-160000.1.1 lock rpm
Documentation for strongSwanstrongswan-fips6.0.4-160000.1.1 lock rpm
Config file to disable non FIPS-140-2 algos in strongSwanstrongswan-ipsec6.0.4-160000.1.1 lock rpm
Old-style "ipsec" interface (stroke/starter) for strongSwanstrongswan-mysql6.0.4-160000.1.1 lock rpm
MySQL plugin for strongSwanstrongswan-nm6.0.4-160000.1.1 lock rpm
NetworkManager plugin for strongSwanstrongswan-sqlite6.0.4-160000.1.1 lock rpm
SQLite plugin for strongSwan6.0.4-160000.1.1 lock rpm
SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le
-
Packagesstrongswan
IPsec-based VPN solutionstrongswan-doc6.0.4-160000.1.1 lock rpm
Documentation for strongSwanstrongswan-fips6.0.4-160000.1.1 lock rpm
Config file to disable non FIPS-140-2 algos in strongSwanstrongswan-ipsec6.0.4-160000.1.1 lock rpm
Old-style "ipsec" interface (stroke/starter) for strongSwanstrongswan-mysql6.0.4-160000.1.1 lock rpm
MySQL plugin for strongSwanstrongswan-nm6.0.4-160000.1.1 lock rpm
NetworkManager plugin for strongSwanstrongswan-sqlite6.0.4-160000.1.1 lock rpm
SQLite plugin for strongSwan6.0.4-160000.1.1 lock rpm
SUSE Linux Enterprise Server for SAP applications 16.0 x86_64
-
Packagesstrongswan
IPsec-based VPN solutionstrongswan-doc6.0.4-160000.1.1 lock rpm
Documentation for strongSwanstrongswan-fips6.0.4-160000.1.1 lock rpm
Config file to disable non FIPS-140-2 algos in strongSwanstrongswan-ipsec6.0.4-160000.1.1 lock rpm
Old-style "ipsec" interface (stroke/starter) for strongSwanstrongswan-mysql6.0.4-160000.1.1 lock rpm
MySQL plugin for strongSwanstrongswan-nm6.0.4-160000.1.1 lock rpm
NetworkManager plugin for strongSwanstrongswan-sqlite6.0.4-160000.1.1 lock rpm
SQLite plugin for strongSwan6.0.4-160000.1.1 lock rpm