The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key
exchange protocols in conjunction with the native NETKEY IPsec stack of the
Linux kernel.
* Tue May 12 2026 Paul Wouters <paul.wouters@aiven.io> - 6.0.6-2
- updated sources
* Tue May 12 2026 Paul Wouters <paul.wouters@aiven.io> - 6.0.6-1
- Update to 6.0.6 for 8 CVEs
* Wed Mar 04 2026 Petr Menšík <pemensik@redhat.com> - 6.0.4-2
- Fix subpackages dependencies
* Wed Mar 04 2026 Paul Wouters <paul.wouters@aiven.io> - 6.0.4-1
- Update to 6.0.4 for CVE-2025-9615 and CVE-2025-62291
* Sat Jan 17 2026 Fedora Release Engineering <releng@fedoraproject.org> - 6.0.2-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Thu Sep 25 2025 Paul Wouters <paul.wouters@aiven.io> - 6.0.2-4
- Enable ML-KEM
* Wed Sep 24 2025 Paul Wouters <paul.wouters@aiven.io> - 6.0.2-3
- Re-enable python subpackage, re-enable upstream tests
- patch to use --no-isolation with python by Carlos Rodriguez-Fernandez
- python dependencies fixed so pip no longer tries to download items
- apply upstream patch to remove md2 support - now all tests pass again
* Mon Aug 25 2025 Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 5.9.14-12
- Fix ipsec.d cacerts removing system ca
* Fri Aug 22 2025 Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 5.9.14-11
- Link new system ca bundle in the ipsec.d cacerts
* Fri Aug 15 2025 Python Maint <python-maint@redhat.com> - 5.9.14-10
- Rebuilt for Python 3.14.0rc2 bytecode
* Thu Aug 14 2025 Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 5.9.14-9
- Fix build issue (rhbz#2368971)
* Fri Jul 25 2025 Fedora Release Engineering <releng@fedoraproject.org> - 5.9.14-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Mon Jun 02 2025 Python Maint <python-maint@redhat.com> - 5.9.14-7
- Rebuilt for Python 3.14
* Sun Jan 19 2025 Fedora Release Engineering <releng@fedoraproject.org> - 5.9.14-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Sat Jul 27 2024 Michel Lind <salimma@fedoraproject.org> - 5.9.14-5
- Depend on openssl-devel-engine since we still use this deprecated feature (rhbz#2295335)
* Fri Jul 26 2024 Miroslav Suchý <msuchy@redhat.com> - 5.9.14-4
- convert license to SPDX
* Sat Jul 20 2024 Fedora Release Engineering <releng@fedoraproject.org> - 5.9.14-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Fri Jun 07 2024 Python Maint <python-maint@redhat.com> - 5.9.14-2
- Rebuilt for Python 3.13
* Fri May 31 2024 Paul Wouters <paul.wouters@aiven.io> - 5.9.14-1
- Resolves: rhbz#2254560 CVE-2023-41913 buffer overflow and possible RCE
- Resolved: rhbz#2250666 Update to 5.9.14 (IKEv2 OCSP extensions, seqno/regno overflow handling
- Update to 5.9.13 (OCSP nonce set regression configuration option charon.ocsp_nonce_len)
- Update to 5.9.12 (CVE-2023-41913 fix, various IKEv2 fixes)
