LoginSign Up
← Back to all sparks
L

Libreswan

DEVOPS
Velocity2.5

IPsec VPN implementation for Linux and BSD supporting IKEv1 and IKEv2

libreswan.org ↗

IPsec daemon shipping back-to-back CVE releases, one of them found by an AI audit.

ipsecvpnsecuritycvecertificate-parsing
◆Current state
Libreswan is an IKE/IPsec implementation, and its recent visible releases are entirely security-driven: 5.3.1 addressed three CVEs, and 5.3.2 followed a month later with a single one. The 5.3.2 note discloses that the project ran an AI-assisted audit of its own codebase, which surfaced an assertion failure reachable through a malformed X.509 certificate in FIPS mode. The older entries in this feed are raw commit-log dumps from the 4.x and 5.0rc era rather than curated notes.
◆Where it's heading
The project is auditing itself more aggressively than its release cadence suggests, and the parsing paths — certificate handling, IKEv1 proposal defaults — are where the findings keep landing. The 5.0 work visible here was a deliberate tightening of IKEv1 cryptosuite defaults, and the current CVE stream is the same instinct applied to inputs an attacker controls.
◆Prediction
Further findings from the same audit path would surface as additional point releases against certificate and packet parsing; the entries do not indicate whether the audit is complete.

◆Recent moves

  1. 25d ago

    5.3.2 Security Release addresses CVE-2026-14957

    Fixes a denial of service where a malformed X.509 certificate triggers an assertion failure and crashes the daemon in FIPS mode, repeatable by an attacker. The disclosure that the finding came from an AI-assisted audit of the project's own codebase is unusual to see stated in a release note.

    View source ↗
  2. 1mo ago

    5.3.1 Security Release addresses 3 CVEs

    A three-CVE security release, bundled with a compile fix for newer GCC versions. It sets up the pattern the following month's release continues — Libreswan is shipping on security findings rather than a feature calendar.

    View source ↗
  3. 2y ago

    IKEv1 cryptosuite defaults tightened; systemd libxz dependency dropped

    A release candidate whose note is a raw commit log, but the substance is a deliberate overhaul of IKEv1 defaults: SHA2 and AES-GCM added to ESP proposals, DH19 and DH31 added to IKE defaults, and AEAD rejected when combined with non-NULL integrity. Replacing the libsystemd notify path with an internal library also removes a libxz dependency.

    View source ↗
  4. 2y ago

    Compile error fix carried over from 4.13

    A two-line maintenance tag fixing a compile error in gntoid() and adjusting a test for padded packets. Nothing user-facing.

    View source ↗