git: 28b521d90f3c - 2026Q3 - security/strongswan: Update 6.0.7 => 6.1.0
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Sun, 13 Sep 2026 19:39:36 UTC
The branch 2026Q3 has been updated by rcm:
URL: https://cgit.FreeBSD.org/ports/commit/?id=28b521d90f3c9c0e9d1d4358239e0f9252a5148f
commit 28b521d90f3c9c0e9d1d4358239e0f9252a5148f
Author: R. Christian McDonald <rcm@FreeBSD.org>
AuthorDate: 2026-09-13 19:20:59 +0000
Commit: R. Christian McDonald <rcm@FreeBSD.org>
CommitDate: 2026-09-13 19:39:11 +0000
security/strongswan: Update 6.0.7 => 6.1.0
Changelog:
https://github.com/strongswan/strongswan/releases/tag/6.1.0
PR: 298372
MFH: 2026Q3
Security: CVE-2026-78123
Security: CVE-2026-78124
Security: CVE-2026-78126
Security: CVE-2026-78127
Security: CVE-2026-78129
Security: CVE-2026-78130
Security: CVE-2026-78131
Security: CVE-2026-78132
Security: CVE-2026-78133
Security: CVE-2026-78134
Security: CVE-2026-78135
Sponsored by: Rubicon Communications, LLC ("Netgate")
(cherry picked from commit 5a7f75878c1b8dabb3b333f523eba2c1c958ed8a)
---
security/strongswan/Makefile | 4 ++--
security/strongswan/distinfo | 6 +++---
security/strongswan/files/patch-conf_Makefile.in | 4 ++--
.../files/patch-src_libcharon_plugins_smp_smp.c | 23 ----------------------
security/strongswan/pkg-plist | 5 -----
5 files changed, 7 insertions(+), 35 deletions(-)
diff --git a/security/strongswan/Makefile b/security/strongswan/Makefile
index fdcbfe736c64..0152cb1114df 100644
--- a/security/strongswan/Makefile
+++ b/security/strongswan/Makefile
@@ -1,5 +1,5 @@
PORTNAME= strongswan
-DISTVERSION= 6.0.7
+DISTVERSION= 6.1.0
CATEGORIES= security net-vpn
MASTER_SITES= https://download.strongswan.org/ \
https://download2.strongswan.org/
@@ -103,7 +103,7 @@ EAPSIMFILE_CONFIGURE_ON= --enable-eap-sim \
FARP_CONFIGURE_ON= --enable-farp
FIPS_PRF_CONFIGURE_ON= --enable-fips-prf
GCM_CONFIGURE_ON= --enable-gcm
-IKEV1_CONFIGURE_OFF= --disable-ikev1
+IKEV1_CONFIGURE_ON= --enable-ikev1
IPSECKEY_CONFIGURE_ON= --enable-ipseckey
KDF_CONFIGURE_ON= --enable-kdf
KERNELLIBIPSEC_CONFIGURE_ON= --enable-kernel-libipsec
diff --git a/security/strongswan/distinfo b/security/strongswan/distinfo
index 54be35770c69..fd3c047b8a90 100644
--- a/security/strongswan/distinfo
+++ b/security/strongswan/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1780929769
-SHA256 (strongswan-6.0.7.tar.bz2) = e518e34e159514f4c6ba80d1f926cb151e0dd4e3a1d94213171234b8b9ae6f55
-SIZE (strongswan-6.0.7.tar.bz2) = 4939164
+TIMESTAMP = 1789061339
+SHA256 (strongswan-6.1.0.tar.bz2) = fe6c97481298767213cfc2e9a1da29fdd8018d481ff4cb9cf0283099654f20d4
+SIZE (strongswan-6.1.0.tar.bz2) = 4620545
diff --git a/security/strongswan/files/patch-conf_Makefile.in b/security/strongswan/files/patch-conf_Makefile.in
index 53d4283d3e94..cbd67f3c4533 100644
--- a/security/strongswan/files/patch-conf_Makefile.in
+++ b/security/strongswan/files/patch-conf_Makefile.in
@@ -1,6 +1,6 @@
---- conf/Makefile.in.orig 2026-03-23 12:42:09 UTC
+--- conf/Makefile.in.orig 2026-09-10 17:39:46 UTC
+++ conf/Makefile.in
-@@ -931,25 +931,25 @@ install-data-local: $(plugins_install_src)
+@@ -919,25 +919,25 @@ install-data-local: $(plugins_install_src)
test -e "$(DESTDIR)${charonconfdir}" || test -z "${charon_install_src}" || $(INSTALL) -d "$(DESTDIR)$(charonconfdir)" || true
test -e "$(DESTDIR)${cmdconfdir}" || test -z "${cmd_install_src}" || $(INSTALL) -d "$(DESTDIR)$(cmdconfdir)" || true
test -e "$(DESTDIR)${nmconfdir}" || test -z "${nm_install_src}" || $(INSTALL) -d "$(DESTDIR)$(nmconfdir)" || true
diff --git a/security/strongswan/files/patch-src_libcharon_plugins_smp_smp.c b/security/strongswan/files/patch-src_libcharon_plugins_smp_smp.c
deleted file mode 100644
index 0c57dc92e0cc..000000000000
--- a/security/strongswan/files/patch-src_libcharon_plugins_smp_smp.c
+++ /dev/null
@@ -1,23 +0,0 @@
---- src/libcharon/plugins/smp/smp.c.orig 2025-11-07 19:05:36 UTC
-+++ src/libcharon/plugins/smp/smp.c
-@@ -743,7 +743,7 @@ PLUGIN_DEFINE(smp)
- */
- PLUGIN_DEFINE(smp)
- {
-- struct sockaddr_un unix_addr = { AF_UNIX, IPSEC_PIDDIR "/charon.xml"};
-+ struct sockaddr_un unix_addr;
- private_smp_t *this;
- mode_t old;
-
-@@ -771,6 +771,11 @@ PLUGIN_DEFINE(smp)
- free(this);
- return NULL;
- }
-+
-+ strlcpy(unix_addr.sun_path, IPSEC_PIDDIR "/charon.xml",
-+ sizeof(unix_addr.sun_path));
-+ unix_addr.sun_len = sizeof(unix_addr);
-+ unix_addr.sun_family = PF_LOCAL;
-
- unlink(unix_addr.sun_path);
- old = umask(S_IRWXO);
diff --git a/security/strongswan/pkg-plist b/security/strongswan/pkg-plist
index d7cb7ca22130..9820d7f8ddf2 100644
--- a/security/strongswan/pkg-plist
+++ b/security/strongswan/pkg-plist
@@ -2,7 +2,6 @@
%%TPM%%bin/tpm_extendpcr
@sample %%ETCDIR%%.conf.sample
@sample %%ETCDIR%%.d/charon-cmd.conf.sample
-@sample %%ETCDIR%%.d/charon-cmd/blowfish.conf.sample
@sample %%ETCDIR%%.d/charon-cmd/cmac.conf.sample
@sample %%ETCDIR%%.d/charon-cmd/constraints.conf.sample
%%CTR%%@sample %%ETCDIR%%.d/charon-cmd/ctr.conf.sample
@@ -47,7 +46,6 @@
@sample %%ETCDIR%%.d/charon/addrblock.conf.sample
%%SQL%%@sample %%ETCDIR%%.d/charon/attr-sql.conf.sample
@sample %%ETCDIR%%.d/charon/attr.conf.sample
-@sample %%ETCDIR%%.d/charon/blowfish.conf.sample
@sample %%ETCDIR%%.d/charon/cmac.conf.sample
@sample %%ETCDIR%%.d/charon/constraints.conf.sample
@sample %%ETCDIR%%.d/charon/counters.conf.sample
@@ -161,8 +159,6 @@ lib/ipsec/plugins/libstrongswan-addrblock.so
%%SQL%%lib/ipsec/plugins/libstrongswan-attr-sql.so
lib/ipsec/plugins/libstrongswan-attr.la
lib/ipsec/plugins/libstrongswan-attr.so
-lib/ipsec/plugins/libstrongswan-blowfish.la
-lib/ipsec/plugins/libstrongswan-blowfish.so
lib/ipsec/plugins/libstrongswan-cmac.la
lib/ipsec/plugins/libstrongswan-cmac.so
lib/ipsec/plugins/libstrongswan-constraints.la
@@ -333,7 +329,6 @@ sbin/charon-cmd
%%DATADIR%%/templates/config/plugins/addrblock.conf
%%SQL%%%%DATADIR%%/templates/config/plugins/attr-sql.conf
%%DATADIR%%/templates/config/plugins/attr.conf
-%%DATADIR%%/templates/config/plugins/blowfish.conf
%%DATADIR%%/templates/config/plugins/cmac.conf
%%DATADIR%%/templates/config/plugins/constraints.conf
%%DATADIR%%/templates/config/plugins/counters.conf