Security and Functional Flaw Reporting

Security Flaws

Reporting

Please follow our security policy if you find or suspect a security-relevant flaw in strongSwan.

List of Published and Fixed Security Flaws

A list of all published strongSwan high and medium security flaws can be found on our website, as can the corresponding security patches and OSV files. Each security patch is signed by the strongSwan release PGP key.

Functional Flaws

Please report all non-security-related flaws and bugs by opening a new issue on our strongSwan GitHub site. Of course it is helpful if you can already pinpoint the code file where you suspect the bug or in the case of a crash to provide a backtrack analysis of the core dump.
User patches fixing flaws are always welcome can be posted as a pull request on our strongSwan GitHub site.