diff mbox series

strongswan: Update to version 6.0.5

Message ID 20260407151108.3472751-30-adolf.belka@ipfire.org
State Staged
Commit 83c98ae983c093f2acf18e82642a09db99d5dddb
Headers
Series strongswan: Update to version 6.0.5 |

Commit Message

Adolf Belka 7 Apr 2026, 3:11 p.m. UTC 
- Update from version 6.0.4 to 6.0.5
- No change to rootfile
- One CVE fix included
- Changelog
    6.0.5
- Fixed a vulnerability in the eap-ttls plugin related to processing EAP-TTLS
  AVPs that can lead to a resource exhaustion or a crash.
  This vulnerability has been registered as CVE-2026-25075.
- Added support for forwarding certain ICMP errors even if their source address
  doesn't match the traffic selectors, when running on Linux 6.9+.
- The dhcp plugin now tracks leases across make-before-break reauthentications.
- charon-cmd support childless IKE SA initiation and IKEv2 PSK authentication.
- The kernel-netlink plugin now doesn't default to the peer's address as next
  hop when installing routes if at least an interface was found.
- organizationIdentifier RDNs are supported when parsing ASN.1 DN identities
  from strings.
- Options shared by all commands in the swanctl and pki tools (e.g. --debug) are
  now parsed even if passed before the command. The log level is now always
  changed before initializing the libraries and plugins. And due to conflicts,
  the short options for swanctl's `--version` and `--uninstall` commands were
  changed to `-V` and `-U`, respectively. Similarly, the short option for pki's
  `--verify` command is now `-V`.
- For distributions that package plugins separately a new configure option is
  provided to change the log message if a plugin can't be loaded.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/strongswan | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)
diff mbox series

Patch

diff --git a/lfs/strongswan b/lfs/strongswan
index a993dd39e..aea530fd9 100644
--- a/lfs/strongswan
+++ b/lfs/strongswan
@@ -1,7 +1,7 @@ 
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2025  IPFire Team  <info@ipfire.org>                     #
+# Copyright (C) 2007-2026  IPFire Team  <info@ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,7 +24,7 @@ 
 
 include Config
 
-VER        = 6.0.4
+VER        = 6.0.5
 
 THISAPP    = strongswan-$(VER)
 DL_FILE    = $(THISAPP).tar.bz2
@@ -43,7 +43,7 @@  objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 2291900bda3e679cb68f35e44fe20011d82b44e7a9ed3fd0ae7c40ed57154c5ecded1ab5bffc9ab30c93de667ef9b103a7da1a2b31d8e2eae97b268f0be11f01
+$(DL_FILE)_BLAKE2 = 202515de3c275be32f5c9485c37a4b6c0d0f6d4e7298bc0594cb166cca8c2a78fa3ea7398f67311d26bf49479645d0a91bb1f8ccc8d374374d13fd0d3ea2fb48
 
 install : $(TARGET)