From 2a3a678be189e51465d17c611982a9e5f379b016 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Mon, 15 Jun 2026 16:02:01 +0200 Subject: [PATCH] openssl: Fix memory leaks after enumerating certificates in PKCS#7 container This can be triggered via IKEv1. Fixes: 04884be3b5f7 ("Implement openssl PKCS#7 certficiate enumeration") Fixes: CVE-2026-78124 --- src/libstrongswan/plugins/openssl/openssl_pkcs7.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/libstrongswan/plugins/openssl/openssl_pkcs7.c b/src/libstrongswan/plugins/openssl/openssl_pkcs7.c index 9980bf242c12..46584055ec3f 100644 --- a/src/libstrongswan/plugins/openssl/openssl_pkcs7.c +++ b/src/libstrongswan/plugins/openssl/openssl_pkcs7.c @@ -132,6 +132,10 @@ typedef struct { METHOD(enumerator_t, cert_destroy, void, cert_enumerator_t *this) { + if (this->certs) + { + sk_X509_pop_free(this->certs, X509_free); + } DESTROY_IF(this->cert); free(this); } -- 2.43.0