File ipsec-tools.changes of Package ipsec-tools
-------------------------------------------------------------------
Fri Sep 18 22:48:07 CEST 2009 - chris@computersalat.de
- cleanup spec
o sorted TAGS
o added configure macro
- rpmlint
o added fdupes
- fix selinux build
o if suse_version >= 1100
-------------------------------------------------------------------
Thu Jun 11 17:45:45 CEST 2009 - jbohac@suse.cz
- upgrade to 0.7.3
- integrated security patch
- enabled selinux support (--enable-security-context=yes)
-------------------------------------------------------------------
Thu Jun 11 17:45:45 CEST 2009 - jbohac@suse.cz
- fix_sockaddr_overflow_in_ipsec_doi.c.diff (bnc#506710)
-------------------------------------------------------------------
Wed May 6 15:54:01 CEST 2009 - jbohac@suse.cz
- Upgrade to 0.7.2
- fixed some rpmlint warnings/errors
- racoon.conf_macros.patch updates the .in file, not the result
- added /etc/pam.d/racoon
- added --with-libldap
-------------------------------------------------------------------
Tue Sep 23 15:08:40 CEST 2008 - jbohac@suse.cz
- fixed a memory leak in PH1 (bnc#416906, CVE-2008-3652)
-------------------------------------------------------------------
Thu Aug 14 19:30:51 CEST 2008 - jbohac@suse.cz
- Upgrade to 0.7.1
o Fixes a memory leak when invalid proposal received
o Some fixes in DPD
o do not set default gss id if xauth is used
o fixed hybrid enabled builds
o fixed compilation on FreeBSD8
o cleanup in network port value manipulation
o gets ports from SADB_X_EXT_NAT_T_[SD]PORT if present in purge_ipsec_spi()
o Generates a log if cert validation has been disabled by configuration
o better handling for pfkey socket read errors
o Fixes in yacc / bison stuff
o new plog() macro (reduced CPU usage when logging is disabled)
o Try to works better with huge SPD/SAD
o Corrected modecfg option syntax
o Many other various fixes...
-------------------------------------------------------------------
Wed Nov 7 19:46:03 CET 2007 - jbohac@suse.cz
- Upgrade to 0.7
-------------------------------------------------------------------
Thu Apr 12 11:36:01 CEST 2007 - jbohac@jikos.cz
- Fix a DoS in isakmp_info_recv (CVE-2007-1841, 260791)
-------------------------------------------------------------------
Thu Mar 29 16:12:01 CEST 2007 - aj@suse.de
- Add flex and bison to BuildRequires.
-------------------------------------------------------------------
Thu May 4 22:08:06 CEST 2006 - jbohac@suse.cz
- fixed a segfault in GSSAPI initialization (#172196)
-------------------------------------------------------------------
Thu May 4 22:08:06 CEST 2006 - jbohac@suse.cz
- the /var/run/racoon directory was missing from the package
which prevented racoon from starting (#170552) - fixed
- fixed unexpanded macros in racoon.conf (#170552)
-------------------------------------------------------------------
Tue Mar 21 17:27:19 CET 2006 - jbohac@suse.cz
- upgrade to 0.6.5 (bugfix release)
- Fixed zombie PH1 handler when isakmp_send() fails in
isakmp_ph1resend()
- Temporary fix for /32 subnets parsing.
- make software behave as the documentation advertise for
INTERNAL_NETMASK4. Keep the old INTERNAL_MASK4 to
avoid breaking backward compatibility.
- Fixed / cleaned up signal handling.
- added --with-libpam and --enable-adminport (#159647)
-------------------------------------------------------------------
Wed Jan 25 21:36:40 CET 2006 - mls@suse.de
- converted neededforbuild to BuildRequires
-------------------------------------------------------------------
Tue Dec 13 20:30:55 CET 2005 - jbohac@suse.cz
- fixed build
-------------------------------------------------------------------
Tue Dec 13 17:45:04 CET 2005 - jbohac@suse.cz
- upgrade to 0.6.4
- added krb5 support ( --enable-gssapi)
- added statistics logging support ( --enable-stats)
-------------------------------------------------------------------
Wed Nov 23 16:56:34 CET 2005 - jbohac@suse.cz
- upgrade to 0.6.3 - fixes #134834 and an openssl incompatibility
issue
-------------------------------------------------------------------
Tue Nov 8 16:22:16 CET 2005 - jbohac@suse.cz
- fixed build for s390
-------------------------------------------------------------------
Thu Oct 20 19:43:28 CEST 2005 - jbohac@suse.cz
- upgraded to version 0.6.2
- enabled NAT-T
- fixed build with current openssl
-------------------------------------------------------------------
Wed Aug 31 17:17:02 CEST 2005 - jbohac@suse.cz
- fixed permissions for /etc/racoon/psk.txt (bug #114383)
-------------------------------------------------------------------
Tue Aug 23 14:53:58 CEST 2005 - jbohac@suse.cz
- upgrade to version 0.6.1
-------------------------------------------------------------------
Wed Aug 3 11:46:38 CEST 2005 - jbohac@suse.cz
- fixed build on beta (disabled -Werror again)
-------------------------------------------------------------------
Tue Aug 2 18:21:06 CEST 2005 - cthiel@suse.de
- fixed build
-------------------------------------------------------------------
Tue Aug 2 17:13:18 CEST 2005 - jbohac@suse.cz
- upgrade to version 0.6
-------------------------------------------------------------------
Thu May 5 18:11:32 CEST 2005 - jbohac@suse.cz
- upgrade to version 0.5.2
- disabled -Werror, because bison-generated code would not compile
-------------------------------------------------------------------
Wed Apr 13 18:11:44 CEST 2005 - jbohac@suse.cz
- upgrade to version 0.5.1
- fixed compilation warning/errors regarding char/int signedness
-------------------------------------------------------------------
Wed Apr 13 18:03:31 CEST 2005 - jbohac@suse.cz
- upgrade to version 0.5.1
- fixed compilation warning/errors regarding char/int signedness
-------------------------------------------------------------------
Wed Mar 16 12:50:02 CET 2005 - jbohac@suse.cz
The patch in the previous release was not applied correctly; fixed.
-------------------------------------------------------------------
Tue Mar 15 15:04:04 CET 2005 - jbohac@suse.cz
- security fix - insecure header parsing (Bug ID: 64726)
-------------------------------------------------------------------
Sat Feb 19 12:20:30 CET 2005 - lmuelle@suse.de
- Update to version 0.5.
-------------------------------------------------------------------
Wed Jan 05 16:15:17 CET 2005 - jbohac@suse.cz
- update to ipsec-tools-0.5-rc1
-------------------------------------------------------------------
Thu Nov 18 11:38:35 CET 2004 - mludvig@suse.cz
- Update to version 0.4
-------------------------------------------------------------------
Tue Sep 14 01:38:48 CEST 2004 - ro@suse.de
- undef __P first to make it build
-------------------------------------------------------------------
Tue Aug 10 11:09:23 CEST 2004 - mludvig@suse.cz
- Update to 0.4rc1
-------------------------------------------------------------------
Tue Jun 15 17:08:27 CEST 2004 - mludvig@suse.cz
- Update to 0.3.3 to fix a X.509 cert verification security bug.
(http://marc.theaimsgroup.com/?l=bugtraq&m=108726102304507&w=2)
-------------------------------------------------------------------
Mon May 17 10:21:31 CEST 2004 - mludvig@suse.cz
- Fixed comment in racoon.conf (#40576)
-------------------------------------------------------------------
Wed Apr 21 11:25:04 CEST 2004 - mludvig@suse.cz
- Update to 0.3.1 to fix CAN-2004-0403
-------------------------------------------------------------------
Thu Apr 15 16:25:06 CEST 2004 - mludvig@suse.cz
- Update to final 0.3. We had all patches in the
package anyway...
-------------------------------------------------------------------
Thu Apr 08 14:20:44 CEST 2004 - mludvig@suse.cz
- Fixed setkey to support multiline commands in interactive mode.
- Added 'exit' command to setkey.
The two changes fix TAHI/ipsec tests.
- Emit messages about Keep-Alive packets with DEBUG severity
instead of INFO. With INFO it only polutes syslog every 20s.
-------------------------------------------------------------------
Mon Apr 05 17:58:29 CEST 2004 - mludvig@suse.cz
- Fixed X.509 security bug (#38373)
-------------------------------------------------------------------
Thu Apr 01 15:39:56 CEST 2004 - mludvig@suse.cz
- Report received SADB_X_NAT_T_NEW_MAPPING message.
- Avoid segfault with unknown PF_KEY messages.
- Move encmode update out of the loop. NAT-T now works
even with more than one proposal.
-------------------------------------------------------------------
Tue Mar 30 09:41:36 CEST 2004 - mludvig@suse.cz
- Rewritten the testsuite to avoid
failures on 32b platforms.
-------------------------------------------------------------------
Fri Mar 26 14:01:57 CET 2004 - mludvig@suse.cz
- Handle input lines one by one in interactive mode
(preventing premature exit on syntax error).
-------------------------------------------------------------------
Thu Mar 25 18:22:31 CET 2004 - mludvig@suse.cz
- Update to 0.3rc4:
- Fixed adding "null" encryption via 'setkey'.
- Fixed segfault when using AES in Phase1 with OpenSSL>=0.9.7
- Fixed NAT-T in aggresive mode.
- Fixed testsuite and added testsuite run into make check.
-------------------------------------------------------------------
Tue Mar 23 10:14:14 CET 2004 - mludvig@suse.cz
- Fix segfault with AES.
- Enable testsuite.
-------------------------------------------------------------------
Mon Mar 22 11:28:00 CET 2004 - mludvig@suse.cz
- Fix "null" encryption setup in setkey.
-------------------------------------------------------------------
Fri Mar 19 18:21:15 CET 2004 - mludvig@suse.cz
- Fix duplicate ipsec service (#36575)
- Update to 0.3rc3
-------------------------------------------------------------------
Thu Mar 11 17:05:50 CET 2004 - mludvig@suse.cz
- Update to 0.3rc2
-------------------------------------------------------------------
Mon Mar 08 17:57:18 CET 2004 - mludvig@suse.cz
- Add sysconfig and init.d files.
-------------------------------------------------------------------
Fri Mar 05 16:26:51 CET 2004 - mludvig@suse.cz
- Include samples config files in the RPM.
-------------------------------------------------------------------
Thu Mar 04 18:57:28 CET 2004 - mludvig@suse.cz
- update to 0.3rc1
-------------------------------------------------------------------
Tue Feb 03 15:32:05 CET 2004 - mludvig@suse.cz
- Update to 0.2.4
-------------------------------------------------------------------
Mon Jan 26 22:26:58 CET 2004 - ro@suse.de
- updated neededforbuild "kernel-source-26" -> "kernel-source"
-------------------------------------------------------------------
Thu Jan 15 14:55:01 CET 2004 - mludvig@suse.cz
- update to ipsec-tools-0.2.3
-------------------------------------------------------------------
Sat Jan 10 22:00:47 CET 2004 - adrian@suse.de
- remove obsolete %run_ldconfig
-------------------------------------------------------------------
Tue Dec 23 09:36:57 CET 2003 - mludvig@suse.cz
- Recognize IPSEC_DIR_FWD when dumping SPD.
-------------------------------------------------------------------
Fri Dec 19 17:57:19 CET 2003 - mludvig@suse.cz
- Added many fixes gathered from the mailing list.
- Added support for specifying SA lifebytes.
-------------------------------------------------------------------
Wed Dec 17 19:52:19 CET 2003 - garloff@suse.de
- Package ipsec-tools 0.2.2.
