Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package strongswan for openSUSE:Factory checked in at 2022-05-08 21:52:07 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/strongswan (Old) and /work/SRC/openSUSE:Factory/.strongswan.new.1538 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "strongswan" Sun May 8 21:52:07 2022 rev:84 rq:975521 version:5.9.6 Changes: -------- --- /work/SRC/openSUSE:Factory/strongswan/strongswan.changes 2022-03-23 20:16:00.966382573 +0100 +++ /work/SRC/openSUSE:Factory/.strongswan.new.1538/strongswan.changes 2022-05-08 21:52:11.055450426 +0200 @@ -1,0 +2,21 @@ +Sat Apr 30 08:21:29 UTC 2022 - Jan Engelhardt <[email protected]> + +- Update to release 5.9.6 + * Support for labeled IPsec with IKEv2 + (draft-ietf-ipsecme-labeled-ipsec) has been added. Two modes + are currently supported. + * The secrets used for generating COOKIE payloads are now + switched based on a time limit (2 minutes) and not the + previous usage limit (10'000 generated cookies). + * Actively initiating duplicate CHILD_SAs within the same + IKE_SA is now largely prevented. + * If the source address is unknown when initiating an IKEv2 SA, + a NAT situation is now forced for IPv4 (for IPv6, NAT-T is + disabled) to avoid causing asymmetric enabling of + UDP-encapsulation. + * The main two steps of the IKEv2 key derivation (PRF/prf+) + have been modularized. In particular, prf+ is now provided by + a plugin. +- Drop prf-plus-modularization.patch + +------------------------------------------------------------------- Old: ---- prf-plus-modularization.patch strongswan-5.9.5.tar.bz2 strongswan-5.9.5.tar.bz2.sig New: ---- strongswan-5.9.6.tar.bz2 strongswan-5.9.6.tar.bz2.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ strongswan.spec ++++++ --- /var/tmp/diff_new_pack.UpyzdQ/_old 2022-05-08 21:52:12.227451901 +0200 +++ /var/tmp/diff_new_pack.UpyzdQ/_new 2022-05-08 21:52:12.235451911 +0200 @@ -17,7 +17,7 @@ Name: strongswan -Version: 5.9.5 +Version: 5.9.6 Release: 0 %define upstream_version %{version} %define strongswan_docdir %{_docdir}/%{name} @@ -81,8 +81,6 @@ %endif Patch5: 0005-ikev1-Don-t-retransmit-Aggressive-Mode-response.patch Patch6: harden_strongswan.service.patch -Patch7: prf-plus-modularization.patch -BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: bison BuildRequires: curl-devel BuildRequires: flex @@ -270,7 +268,6 @@ > _fipscheck %endif %patch6 -p1 -%patch7 -p1 %build CFLAGS="%{optflags} -W -Wall -Wno-pointer-sign -Wno-strict-aliasing -Wno-unused-parameter" @@ -371,7 +368,7 @@ --enable-curl \ --enable-bypass-lan \ --disable-static -make %{?_smp_mflags} +%make_build %install install -d -m755 %{buildroot}/%{_sbindir}/ @@ -513,14 +510,12 @@ %endif %files -%defattr(-,root,root) %dir %{strongswan_docdir} %{strongswan_docdir}/README.SUSE %if %{with fipscheck} %files hmac -%defattr(-,root,root) %dir %{strongswan_configs} %dir %{strongswan_configs}/charon %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/zzz_fips-enforce.conf @@ -537,7 +532,6 @@ %endif %files ipsec -%defattr(-,root,root) %config(noreplace) %attr(600,root,root) %{_sysconfdir}/ipsec.conf %config(noreplace) %attr(600,root,root) %{_sysconfdir}/ipsec.secrets %config(noreplace) %attr(600,root,root) %{_sysconfdir}/swanctl/swanctl.conf @@ -592,7 +586,6 @@ %{strongswan_plugins}/libstrongswan-updown.so %files doc -%defattr(-,root,root) %dir %{strongswan_docdir} %{strongswan_docdir}/TODO %{strongswan_docdir}/NEWS @@ -606,7 +599,6 @@ %{_mandir}/man8/swanctl.8.* %files libs0 -%defattr(-,root,root) %if %{with systemd} %{_tmpfilesdir}/%{name}.conf %endif @@ -966,7 +958,6 @@ %if %{with nm} %files nm -%defattr(-,root,root) %dir %{_libexecdir}/ipsec %dir %{strongswan_plugins} %{_libexecdir}/ipsec/charon-nm @@ -976,7 +967,6 @@ %if %{with mysql} %files mysql -%defattr(-,root,root) %dir %{strongswan_libdir} %dir %{strongswan_plugins} %{strongswan_plugins}/libstrongswan-mysql.so @@ -997,7 +987,6 @@ %if %{with sqlite} %files sqlite -%defattr(-,root,root) %dir %{strongswan_libdir} %dir %{strongswan_plugins} %{strongswan_plugins}/libstrongswan-sqlite.so @@ -1017,7 +1006,6 @@ %if %{with tests} %files tests -%defattr(-,root,root) %dir %{strongswan_configs} %dir %{strongswan_configs}/charon %{strongswan_configs}/charon/load-tester.conf ++++++ strongswan-5.9.5.tar.bz2 -> strongswan-5.9.6.tar.bz2 ++++++ ++++ 37663 lines of diff (skipped)
