security: T9209: Update the Strongswan version to 6.0.7-1 fix for CVE-2026-47895

[sever-sever]

Change summary

Update the Strongswan version to 6.0.7-1

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Code style update (formatting, renaming)
• Refactoring (no functional changes)
• Migration from an old Vyatta component to vyos-1x, please link to related PR inside obsoleted component
• Other (please describe): Update Strongswan version

Related Task(s)

• https://vyos.dev/T9209

Related PR(s)

How to test / Smoketest result

Checklist:

• I have read the CONTRIBUTING document
• I have linked this PR to one or more Phabricator Task(s)
• My commit headlines contain a valid Task id
• My change requires a change to the documentation
• I have updated the documentation accordingly

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited), Organization UI (inherited)

Review profile: CHILL

Plan: Pro

Run ID: 161a34a9-fa85-450d-89c2-544846f66de3

📥 Commits

Reviewing files that changed from the base of the PR and between 72bae92 and 74d2cc6.

📒 Files selected for processing (1)

• scripts/package-build/strongswan/package.toml

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

• ansible/ansible (manual)

Included review availability: 4 reviews are currently available. Based on recent review activity, included reviews refill at 5 per hour.

📜 Recent review details

⏰ Context from checks skipped due to timeout. (3)

• GitHub Check: codeql-analysis-call / Analyze (python)
• GitHub Check: Mergify Merge Protections
• GitHub Check: Summary

🧰 Additional context used

🔍 Remote MCP vyos.dev

Additional review context

• T9209 is titled “Update the Strongswan version to debian/6.0.7-1”, is Open, and has High priority. Its description specifically requires updating to debian/6.0.7-1 for the rolling product version.
• The task has no comments, so no additional acceptance criteria or implementation guidance are available.

🔇 Additional comments (1)

scripts/package-build/strongswan/package.toml (1)

3-3: LGTM!

Also applies to: 17-17

---

📝 Walkthrough

Summary by CodeRabbit

• Chores
  • Updated the strongSwan package to version 6.0.7-1.
  • Updated the corresponding Debian package changelog version.

Walkthrough

Changes

strongSwan version update

Layer / File(s)	Summary
Align package and changelog versions scripts/package-build/strongswan/package.toml	The package source commit at line 3 changed to debian/6.0.7-1. The Debian changelog command at line 17 changed to 6.0.7-1+vyos0.

Merge Risk: ⚪ Minimal · up to 74d2c

This is a localized Strongswan package version update, and no actionable merge-blocking risk remains beyond normal checks and review.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly identifies the Strongswan version update to 6.0.7-1, which is the main change.
Description check	✅ Passed	The description directly explains the Strongswan version update and links it to task T9209.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

✨ Simplify code

• Create PR with simplified code

---

_{Comment @coderabbitai help to get the list of available commands.}

[hedrok]

Approve: update strongswan version.

[mergify]

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

• Queue this pull request