libreswan/libreswan v5.3.3

5.3.3 Security Release addresses four CVEs

on GitHub

v5.3.3 (Oct 5, 2026)

• Security:
  • fix CVE-2026-77205 - DOS - fips-cert-leak
    http://libreswan.org/security/CVE-2026-77205
    [Wojciech Tatarski (TuxCare), Andrew]
  • fix CVE-2026-77206 - NPE - unexpected-eap-packet
    http://libreswan.org/security/CVE-2026-77206
    [Claude and Ada Logics, David Korczynski, Andrew]
  • fix CVE-2026-77207 - NPE - empty-pkcs7-payload
    http://libreswan.org/security/CVE-2026-77207
    [Claude and Ada Logics, David Korczynski, Andrew]
  • fix CVE-2026-94453 - UAF - EOF in IKETCP
    http://libreswan.org/security/CVE-2026-94453
    [Vlad Miu, Andrew]
  • disable dns-match-id,=, - UAF [#3071 Vlad Miu, Andrew]