[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 91ff2b5c50bf784f659459285fbfaa54d96bd210

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 91ff2b5c50bf784f659459285fbfaa54d96bd210

[Michael Tremer]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".

The branch, next has been updated
       via  91ff2b5c50bf784f659459285fbfaa54d96bd210 (commit)
       via  ddf478439036e7ae0e90b73e1335aca7c592e40d (commit)
       via  83ae07fa480f37e60e0b43994585c030b3fb0bde (commit)
      from  75892195a559f4be637415b82fc22ee8894267b4 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 91ff2b5c50bf784f659459285fbfaa54d96bd210
Author: Michael Tremer <michael.tremer@ipfire.org>
Date:   Mon Jun 8 13:59:18 2026 +0000

    core203: Restart OpenVPN
    
    The package has been updated in this release, so we need to restart it.
    
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit ddf478439036e7ae0e90b73e1335aca7c592e40d
Author: Michael Tremer <michael.tremer@ipfire.org>
Date:   Mon Jun 8 13:58:21 2026 +0000

    strongswan: Update to 6.0.7
    
    CVE-2026-47895 - Fixed a vulnerability in libstrongswan related to the cloning of certain identities that can result in an double-free and potentially remote code execution. Affects 4.3.3 and newer.
    
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit 83ae07fa480f37e60e0b43994585c030b3fb0bde
Author: Michael Tremer <michael.tremer@ipfire.org>
Date:   Mon Jun 8 13:51:59 2026 +0000

    core203: Remove more boost files
    
    These are all tagged libraries which we don't want any more.
    
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

-----------------------------------------------------------------------

Summary of changes:
 .../{oldcore/106 => core/203}/filelists/strongswan          |  0
 config/rootfiles/core/203/update.sh                         | 13 ++++++++++++-
 lfs/strongswan                                              |  7 ++-----
 3 files changed, 14 insertions(+), 6 deletions(-)
 copy config/rootfiles/{oldcore/106 => core/203}/filelists/strongswan (100%)

Difference in files:
diff --git a/config/rootfiles/core/203/filelists/strongswan b/config/rootfiles/core/203/filelists/strongswan
new file mode 120000
index 000000000..90c727e26
--- /dev/null
+++ b/config/rootfiles/core/203/filelists/strongswan
@@ -0,0 +1 @@
+../../../common/strongswan
\ No newline at end of file
diff --git a/config/rootfiles/core/203/update.sh b/config/rootfiles/core/203/update.sh
index 2434aa591..7242f1445 100644
--- a/config/rootfiles/core/203/update.sh
+++ b/config/rootfiles/core/203/update.sh
@@ -102,7 +102,9 @@ rm -rfv \
 
 # Remove boost
 rm -vf \
-	/usr/lib/libboost*.so.1.89.0
+	/usr/lib/libboost*.so.1.89.0 \
+	/usr/lib/libboost*-a64.so.1.90.0 \
+	/usr/lib/libboost*-x64.so.1.90.0
 
 # update linker config
 ldconfig
@@ -119,6 +121,15 @@ ldconfig
 # Start services
 /etc/init.d/fcron restart
 
+# Restart IPsec
+if grep -q "ENABLED=on" /var/ipfire/vpn/settings; then
+	/etc/init.d/ipsec restart
+fi
+
+# Restart OpenVPN
+/etc/init.d/openvpn-rw restart
+/etc/init.d/openvpn-n2n restart
+
 # Re-fetch any RPZs in background
 /usr/local/bin/update-rpzs &
 
diff --git a/lfs/strongswan b/lfs/strongswan
index dd6ea8b5f..9b3d71cbd 100644
--- a/lfs/strongswan
+++ b/lfs/strongswan
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 6.0.6
+VER        = 6.0.7
 
 THISAPP    = strongswan-$(VER)
 DL_FILE    = $(THISAPP).tar.bz2
@@ -32,9 +32,6 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/strongswan-$(VER)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 
-# Fix build with GCC 15
-CFLAGS += -std=gnu17
-
 ###############################################################################
 # Top-level Rules
 ###############################################################################
@@ -43,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 0d98b9230029c6a02f56a7ce7393b2d241dc77880bcae8affb0280a75c190ce96a8727fa079ae46540115f0dbfc3228799742faddccab0e2cbe86f4934e8e23a
+$(DL_FILE)_BLAKE2 = 503973ad437545ebae12297fefea80a6e0e3d9db8781cadc1dc37bfe8dcd8895c4442bf4a3b6f84051ae14ee1024471c4b3d5a5ac99036122d08413ddf3923c8
 
 install : $(TARGET)
 


hooks/post-receive
--
IPFire 2.x development tree