Commit Graph
16 Commits
Author SHA1 Message Date
Paul Wouters 84430ef729 Convert to %autorelease and %autochangelog
[skip changelog]
2025-09-11 10:58:08 -04:00
Paul Wouters efe247ce1b Update to 6.0.2 (rhbz#2312429)
- Disable vici python bindings as it does not build offline yet
- Stop using old pythin macros (rhbz#2378468)
- Remove old trouser support conditional
- Add strongswan-6.0.2-no-isolation.patch
- strongswan-5.6.0-uintptr_t.patch and gcc15 patches no longer needed
2025-09-11 09:55:37 -04:00
Paul Wouters 2ba804af93 * Fri May 31 2024 Paul Wouters <paul.wouters@aiven.io> - 5.9.14-1
- Resolves: rhbz#2254560 CVE-2023-41913 buffer overflow and possible RCE
- Resolved: rhbz#2250666 Update to 5.9.14 (IKEv2 OCSP extensions, seqno/regno overflow handling
- Update to 5.9.13 (OCSP nonce set regression configuration option charon.ocsp_nonce_len)
- Update to 5.9.12 (CVE-2023-41913 fix, various IKEv2 fixes)
2024-05-31 18:21:01 -04:00
Paul Wouters 9e397bfc7d new sources 2023-07-17 17:14:14 -04:00
Paul Wouters 9d159bf0d0 - Resolves: rhbz#2214186 strongswan-5.9.11 is available 2023-07-14 13:45:25 -04:00
Paul Wouters 9d642ad352 no longer use patches merged upstream 2023-03-02 11:02:38 -05:00
Paul Wouters 0132cc5668 - Update to 5.9.10 2023-03-02 10:24:58 -05:00
Paul Wouters 33fb3b13a3 - Resolves: CVE-2023-26463 authorization bypass in TLS-based EAP methods 2023-02-28 17:38:50 -05:00
Paul Wouters 199f1d8708 fixup systemd build requires 2022-10-16 22:42:15 -04:00
Paul Wouters 243ac7aa4a remove obsoleted --enable-imc-swid, --enable-imv-swid 2022-10-16 21:55:29 -04:00
Paul Wouters e2ccbbed7e - Use newly published/cleaned strongswan gpg key 2022-01-25 09:14:37 -05:00
Paul Wouters 3f12242eea - Resolves rhbz#2044361 strongswan-5.9.5 is available (CVE-2021-45079) 2022-01-24 22:05:17 -05:00
Paul Wouters 8d04445d34 strongswan: don't use RuntimeDirectory in systemd service file
Because there are two services, strongswan and strongswan-starter
that use this directory. Otherwise when stopping a service, the
directory is removed from /run and the other service that does
not start anymore.

Also cleanup old patches that are obsolete.
2021-11-08 20:45:23 -05:00
Paul Wouters 28ee63eed5 * Wed Oct 20 2021 Paul Wouters <paul.wouters@aiven.io> - 5.9.4-1
- Resolves: rhbz#2015165 strongswan-5.9.4 is available
- Resolves: rhbz#2015611 CVE-2021-41990 strongswan: gmp plugin: integer overflow via a crafted certificate with an RSASSA-PSS signature
- Resolves: rhbz#2015614 CVE-2021-41991 strongswan: integer overflow when replacing certificates in cache
- Add BuildRequire for tpm2-tss-devel and weak dependency for tpm2-tools
2021-10-20 17:47:06 -04:00
Paul Wouters 6ccc325c15 - Resolves: rhbz#1979574 strongswan-5.9.3 is available
- Make strongswan main dir world readable so apps can find strongswan.conf
2021-07-06 17:31:55 -04:00
Paul Wouters 4d2f255b10 - Resolves: rhbz#1896545 strongswan-5.9.2 is available 2021-06-02 20:28:03 -04:00