diff --git a/extensions-ocp-rhel-9.4.yaml b/extensions-ocp-rhel-9.4.yaml
index 81ad4cc9..b4b534e3 100644
--- a/extensions-ocp-rhel-9.4.yaml
+++ b/extensions-ocp-rhel-9.4.yaml
@@ -15,7 +15,9 @@ extensions:
   # https://github.com/coreos/fedora-coreos-tracker/issues/1504
   ipsec:
     packages:
-      - libreswan
+      # pin to 4.6 for now for https://issues.redhat.com/browse/OCPBUGS-43498
+      # we can revert once that's fixed in latest libreswan
+      - libreswan-4.6
       - NetworkManager-libreswan
   # https://github.com/coreos/fedora-coreos-tracker/issues/326
   usbguard:
diff --git a/extensions-ocp-rhel-9.6.yaml b/extensions-ocp-rhel-9.6.yaml
index 3dd8bc15..f58f002c 100644
--- a/extensions-ocp-rhel-9.6.yaml
+++ b/extensions-ocp-rhel-9.6.yaml
@@ -18,7 +18,9 @@ extensions:
   # https://github.com/coreos/fedora-coreos-tracker/issues/1504
   ipsec:
     packages:
-      - libreswan
+      # pin to 4.6 for now for https://issues.redhat.com/browse/OCPBUGS-43498
+      # we can revert once that's fixed in latest libreswan
+      - libreswan-4.6
       - NetworkManager-libreswan
   # https://github.com/coreos/fedora-coreos-tracker/issues/326
   usbguard: