Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package strongswan for openSUSE:Factory
checked in at 2025-07-22 12:53:52
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/strongswan (Old)
and /work/SRC/openSUSE:Factory/.strongswan.new.8875 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "strongswan"
Tue Jul 22 12:53:52 2025 rev:102 rq:1294327 version:6.0.2
Changes:
--------
--- /work/SRC/openSUSE:Factory/strongswan/strongswan.changes 2025-06-10
08:57:52.133016247 +0200
+++ /work/SRC/openSUSE:Factory/.strongswan.new.8875/strongswan.changes
2025-07-22 12:53:53.044016539 +0200
@@ -1,0 +2,31 @@
+Mon Jul 14 21:10:28 UTC 2025 - Jan Engelhardt <jeng...@inai.de>
+
+- Update to release 6.0.2
+ * Support for per-CPU SAs (RFC 9611) has been added on Linux
+ 6.13+. The new per_cpu_sas setting enables the installation of
+ special trap policies (start_action=trap) that instruct the
+ kernel to consider the CPU from which a packet originates.
+ * Basic support for IP-TFS's (RFC 9347) new AGGFRAG mode has been
+ added on Linux 6.14+. It's similar to tunnel mode but allows
+ aggregating small IP packets into single ESP packets and
+ fragmenting large IP packets into multiple ESP packets.
+ * POSIX regular expressions are now supported to match remote
+ identities. They must start with an explicit type prefix,
+ followed by a caret character (^), and end with a dollar sign
+ ($) to indicate an anchored pattern. Regular expressions are
+ always matched case insensitive against the string
+ representation of other identities, however, the type must
+ match as well.
+ * Switching configs based on EAP-Identities is supported. This
+ changes how configured EAP identities are used. Instead of
+ statically setting and using a configured remote.eap_id !=
+ %any, an EAP-Identity exchange is now always initiated (and
+ required). If the received identity doesn't match the
+ configuration, the peer config is switched to one with a
+ matching identity (wildcards and regular expressions are
+ supported for that match).
+ * ML-KEM is now supported via OpenSSL 3.5+ by the openssl plugin.
+- Delete init.patch (merged), strongswan-gcc15-part1.patch
+ strongswan-gcc15-part2.patch, strongswan-gcc15-part3.patch
+
+-------------------------------------------------------------------
Old:
----
init.patch
strongswan-6.0.1.tar.bz2
strongswan-6.0.1.tar.bz2.sig
strongswan-gcc15-part1.patch
strongswan-gcc15-part2.patch
strongswan-gcc15-part3.patch
New:
----
strongswan-6.0.2.tar.bz2
strongswan-6.0.2.tar.bz2.sig
----------(Old B)----------
Old: * ML-KEM is now supported via OpenSSL 3.5+ by the openssl plugin.
- Delete init.patch (merged), strongswan-gcc15-part1.patch
strongswan-gcc15-part2.patch, strongswan-gcc15-part3.patch
Old: * ML-KEM is now supported via OpenSSL 3.5+ by the openssl plugin.
- Delete init.patch (merged), strongswan-gcc15-part1.patch
strongswan-gcc15-part2.patch, strongswan-gcc15-part3.patch
Old:- Delete init.patch (merged), strongswan-gcc15-part1.patch
strongswan-gcc15-part2.patch, strongswan-gcc15-part3.patch
Old:- Delete init.patch (merged), strongswan-gcc15-part1.patch
strongswan-gcc15-part2.patch, strongswan-gcc15-part3.patch
----------(Old E)----------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ strongswan.spec ++++++
--- /var/tmp/diff_new_pack.BlBNV7/_old 2025-07-22 12:53:53.988055850 +0200
+++ /var/tmp/diff_new_pack.BlBNV7/_new 2025-07-22 12:53:53.992056016 +0200
@@ -39,7 +39,7 @@
%bcond_without systemd
Name: strongswan
-Version: 6.0.1
+Version: 6.0.2
Release: 0
Summary: IPsec-based VPN solution
License: GPL-2.0-or-later
@@ -55,10 +55,6 @@
Patch2: %{name}_ipsec_service.patch
Patch5: 0005-ikev1-Don-t-retransmit-Aggressive-Mode-response.patch
Patch6: harden_strongswan.service.patch
-Patch7: init.patch
-Patch11: strongswan-gcc15-part1.patch
-Patch12: strongswan-gcc15-part2.patch
-Patch13: strongswan-gcc15-part3.patch
BuildRequires: autoconf
BuildRequires: automake
BuildRequires: bison
@@ -476,6 +472,7 @@
%config(noreplace) %attr(600,root,root)
%{strongswan_configs}/charon-logging.conf
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/imcv.conf
%config(noreplace) %attr(600,root,root)
%{strongswan_configs}/imv_policy_manager.conf
+%config(noreplace) %attr(600,root,root) %{strongswan_configs}/iptfs.conf
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/pki.conf
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/pool.conf
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/tnc.conf
@@ -776,6 +773,7 @@
%{strongswan_templates}/config/strongswan.d/charon-nm.conf
%{strongswan_templates}/config/strongswan.d/imcv.conf
%{strongswan_templates}/config/strongswan.d/imv_policy_manager.conf
+%{strongswan_templates}/config/strongswan.d/iptfs.conf
%{strongswan_templates}/config/strongswan.d/pki.conf
%{strongswan_templates}/config/strongswan.d/pool.conf
%{strongswan_templates}/config/strongswan.d/tnc.conf
++++++ _scmsync.obsinfo ++++++
--- /var/tmp/diff_new_pack.BlBNV7/_old 2025-07-22 12:53:54.064059014 +0200
+++ /var/tmp/diff_new_pack.BlBNV7/_new 2025-07-22 12:53:54.068059181 +0200
@@ -1,5 +1,5 @@
-mtime: 1749109503
-commit: a349c94a20c73d8eb19c9f19effd8093b4ae1bd30d4604609c3bcc393d86a811
+mtime: 1752828417
+commit: 53632c49fad42e0d2ff502512a76d7c6158cbaa97a5984e755be4fcbf2c2d5c7
url: https://src.opensuse.org/jengelh/strongswan
revision: master
++++++ build.specials.obscpio ++++++
++++++ strongswan-6.0.1.tar.bz2 -> strongswan-6.0.2.tar.bz2 ++++++
++++ 37215 lines of diff (skipped)
