strongSwan versions 5.0.2 through 6.0.7 contain a vulnerability in the openssl plugin related to incorrect memory handling when enumerating certificates in PKCS#7 containers. This flaw can lead to a lack of memory release after the certificate's effective lifetime, potentially allowing a remote attacker to obtain sensitive information. The issue has a medium severity rating with a CVSS score of 3.7. Official patches addressing this vulnerability are available for multiple Ubuntu releases.