Hello community, here is the log from the commit of package ipsec-tools checked in at Mon Sep 1 02:36:58 CEST 2008. -------- --- ipsec-tools/ipsec-tools.changes 2007-11-07 19:46:20.000000000 +0100 +++ /mounts/work_src_done/STABLE/ipsec-tools/ipsec-tools.changes 2008-08-30 03:29:13.365804000 +0200 @@ -1,0 +2,19 @@ +Thu Aug 14 19:30:51 CEST 2008 - jbohac@suse.cz + +- Upgrade to 0.7.1 + o Fixes a memory leak when invalid proposal received + o Some fixes in DPD + o do not set default gss id if xauth is used + o fixed hybrid enabled builds + o fixed compilation on FreeBSD8 + o cleanup in network port value manipulation + o gets ports from SADB_X_EXT_NAT_T_[SD]PORT if present in purge_ipsec_spi() + o Generates a log if cert validation has been disabled by configuration + o better handling for pfkey socket read errors + o Fixes in yacc / bison stuff + o new plog() macro (reduced CPU usage when logging is disabled) + o Try to works better with huge SPD/SAD + o Corrected modecfg option syntax + o Many other various fixes... + +------------------------------------------------------------------- Old: ---- ipsec-tools-0.7.tar.bz2 New: ---- ipsec-tools-0.7.1.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ ipsec-tools.spec ++++++ --- /var/tmp/diff_new_pack.hB8009/_old 2008-09-01 02:36:42.000000000 +0200 +++ /var/tmp/diff_new_pack.hB8009/_new 2008-09-01 02:36:42.000000000 +0200 @@ -1,18 +1,26 @@ # -# spec file for package ipsec-tools (Version 0.7) +# spec file for package ipsec-tools (Version 0.7.1) # -# Copyright (c) 2007 SUSE LINUX Products GmbH, Nuernberg, Germany. -# This file and all modifications and additions to the pristine -# package are under the same license as the package itself. +# Copyright (c) 2008 SUSE LINUX Products GmbH, Nuernberg, Germany. # +# All modifications and additions to the file contributed by third parties +# remain the property of their copyright owners, unless otherwise agreed +# upon. The license for this file, and modifications and additions to the +# file, is the same license as for the pristine package itself (unless the +# license for the pristine package is not an Open Source License, in which +# case the license is the MIT License). An "Open Source License" is a +# license that conforms to the Open Source Definition (Version 1.9) +# published by the Open Source Initiative. + # Please submit bugfixes or comments via http://bugs.opensuse.org/ # # norootforbuild + Name: ipsec-tools BuildRequires: bison flex kernel-source krb5-devel openssl-devel pam pam-devel readline-devel -Version: 0.7 +Version: 0.7.1 Release: 1 License: BSD 3-Clause Group: Productivity/Networking/Security @@ -138,19 +146,36 @@ /var/run/racoon %ghost /var/run/racoon/racoon.sock %{_mandir}/man*/* + %changelog -* Wed Nov 07 2007 - jbohac@suse.cz +* Thu Aug 14 2008 jbohac@suse.cz +- Upgrade to 0.7.1 + o Fixes a memory leak when invalid proposal received + o Some fixes in DPD + o do not set default gss id if xauth is used + o fixed hybrid enabled builds + o fixed compilation on FreeBSD8 + o cleanup in network port value manipulation + o gets ports from SADB_X_EXT_NAT_T_[SD]PORT if present in purge_ipsec_spi() + o Generates a log if cert validation has been disabled by configuration + o better handling for pfkey socket read errors + o Fixes in yacc / bison stuff + o new plog() macro (reduced CPU usage when logging is disabled) + o Try to works better with huge SPD/SAD + o Corrected modecfg option syntax + o Many other various fixes... +* Wed Nov 07 2007 jbohac@suse.cz - Upgrade to 0.7 -* Thu Apr 12 2007 - jbohac@jikos.cz +* Thu Apr 12 2007 jbohac@jikos.cz - Fix a DoS in isakmp_info_recv (CVE-2007-1841, 260791) -* Thu Mar 29 2007 - aj@suse.de +* Thu Mar 29 2007 aj@suse.de - Add flex and bison to BuildRequires. -* Thu May 04 2006 - jbohac@suse.cz +* Fri May 05 2006 jbohac@suse.cz - fixed a segfault in GSSAPI initialization (#172196) - the /var/run/racoon directory was missing from the package which prevented racoon from starting (#170552) - fixed - fixed unexpanded macros in racoon.conf (#170552) -* Tue Mar 21 2006 - jbohac@suse.cz +* Tue Mar 21 2006 jbohac@suse.cz - upgrade to 0.6.5 (bugfix release) - Fixed zombie PH1 handler when isakmp_send() fails in isakmp_ph1resend() @@ -160,119 +185,119 @@ avoid breaking backward compatibility. - Fixed / cleaned up signal handling. - added --with-libpam and --enable-adminport (#159647) -* Wed Jan 25 2006 - mls@suse.de +* Wed Jan 25 2006 mls@suse.de - converted neededforbuild to BuildRequires -* Tue Dec 13 2005 - jbohac@suse.cz +* Tue Dec 13 2005 jbohac@suse.cz - fixed build -* Tue Dec 13 2005 - jbohac@suse.cz +* Tue Dec 13 2005 jbohac@suse.cz - upgrade to 0.6.4 - added krb5 support ( --enable-gssapi) - added statistics logging support ( --enable-stats) -* Wed Nov 23 2005 - jbohac@suse.cz +* Wed Nov 23 2005 jbohac@suse.cz - upgrade to 0.6.3 - fixes #134834 and an openssl incompatibility issue -* Tue Nov 08 2005 - jbohac@suse.cz +* Tue Nov 08 2005 jbohac@suse.cz - fixed build for s390 -* Thu Oct 20 2005 - jbohac@suse.cz +* Thu Oct 20 2005 jbohac@suse.cz - upgraded to version 0.6.2 - enabled NAT-T - fixed build with current openssl -* Wed Aug 31 2005 - jbohac@suse.cz +* Wed Aug 31 2005 jbohac@suse.cz - fixed permissions for /etc/racoon/psk.txt (bug #114383) -* Tue Aug 23 2005 - jbohac@suse.cz +* Tue Aug 23 2005 jbohac@suse.cz - upgrade to version 0.6.1 -* Wed Aug 03 2005 - jbohac@suse.cz +* Wed Aug 03 2005 jbohac@suse.cz - fixed build on beta (disabled -Werror again) -* Tue Aug 02 2005 - cthiel@suse.de +* Tue Aug 02 2005 cthiel@suse.de - fixed build -* Tue Aug 02 2005 - jbohac@suse.cz +* Tue Aug 02 2005 jbohac@suse.cz - upgrade to version 0.6 -* Thu May 05 2005 - jbohac@suse.cz +* Thu May 05 2005 jbohac@suse.cz - upgrade to version 0.5.2 - disabled -Werror, because bison-generated code would not compile -* Wed Apr 13 2005 - jbohac@suse.cz +* Wed Apr 13 2005 jbohac@suse.cz - upgrade to version 0.5.1 - fixed compilation warning/errors regarding char/int signedness -* Wed Apr 13 2005 - jbohac@suse.cz +* Wed Apr 13 2005 jbohac@suse.cz - upgrade to version 0.5.1 - fixed compilation warning/errors regarding char/int signedness -* Wed Mar 16 2005 - jbohac@suse.cz +* Wed Mar 16 2005 jbohac@suse.cz The patch in the previous release was not applied correctly; fixed. -* Tue Mar 15 2005 - jbohac@suse.cz +* Tue Mar 15 2005 jbohac@suse.cz - security fix - insecure header parsing (Bug ID: 64726) -* Sat Feb 19 2005 - lmuelle@suse.de +* Sat Feb 19 2005 lmuelle@suse.de - Update to version 0.5. -* Wed Jan 05 2005 - jbohac@suse.cz +* Wed Jan 05 2005 jbohac@suse.cz - update to ipsec-tools-0.5-rc1 -* Thu Nov 18 2004 - mludvig@suse.cz +* Thu Nov 18 2004 mludvig@suse.cz - Update to version 0.4 -* Tue Sep 14 2004 - ro@suse.de +* Tue Sep 14 2004 ro@suse.de - undef __P first to make it build -* Tue Aug 10 2004 - mludvig@suse.cz +* Tue Aug 10 2004 mludvig@suse.cz - Update to 0.4rc1 -* Tue Jun 15 2004 - mludvig@suse.cz +* Tue Jun 15 2004 mludvig@suse.cz - Update to 0.3.3 to fix a X.509 cert verification security bug. (http://marc.theaimsgroup.com/?l=bugtraq&m=108726102304507&w=2) -* Mon May 17 2004 - mludvig@suse.cz +* Mon May 17 2004 mludvig@suse.cz - Fixed comment in racoon.conf (#40576) -* Wed Apr 21 2004 - mludvig@suse.cz +* Wed Apr 21 2004 mludvig@suse.cz - Update to 0.3.1 to fix CAN-2004-0403 -* Thu Apr 15 2004 - mludvig@suse.cz +* Thu Apr 15 2004 mludvig@suse.cz - Update to final 0.3. We had all patches in the package anyway... -* Thu Apr 08 2004 - mludvig@suse.cz +* Thu Apr 08 2004 mludvig@suse.cz - Fixed setkey to support multiline commands in interactive mode. - Added 'exit' command to setkey. The two changes fix TAHI/ipsec tests. - Emit messages about Keep-Alive packets with DEBUG severity instead of INFO. With INFO it only polutes syslog every 20s. -* Mon Apr 05 2004 - mludvig@suse.cz +* Mon Apr 05 2004 mludvig@suse.cz - Fixed X.509 security bug (#38373) -* Thu Apr 01 2004 - mludvig@suse.cz +* Thu Apr 01 2004 mludvig@suse.cz - Report received SADB_X_NAT_T_NEW_MAPPING message. - Avoid segfault with unknown PF_KEY messages. - Move encmode update out of the loop. NAT-T now works even with more than one proposal. -* Tue Mar 30 2004 - mludvig@suse.cz +* Tue Mar 30 2004 mludvig@suse.cz - Rewritten the testsuite to avoid failures on 32b platforms. -* Fri Mar 26 2004 - mludvig@suse.cz +* Fri Mar 26 2004 mludvig@suse.cz - Handle input lines one by one in interactive mode (preventing premature exit on syntax error). -* Thu Mar 25 2004 - mludvig@suse.cz +* Thu Mar 25 2004 mludvig@suse.cz - Update to 0.3rc4: - Fixed adding "null" encryption via 'setkey'. - Fixed segfault when using AES in Phase1 with OpenSSL>=0.9.7 - Fixed NAT-T in aggresive mode. - Fixed testsuite and added testsuite run into make check. -* Tue Mar 23 2004 - mludvig@suse.cz +* Tue Mar 23 2004 mludvig@suse.cz - Fix segfault with AES. - Enable testsuite. -* Mon Mar 22 2004 - mludvig@suse.cz +* Mon Mar 22 2004 mludvig@suse.cz - Fix "null" encryption setup in setkey. -* Fri Mar 19 2004 - mludvig@suse.cz +* Fri Mar 19 2004 mludvig@suse.cz - Fix duplicate ipsec service (#36575) - Update to 0.3rc3 -* Thu Mar 11 2004 - mludvig@suse.cz +* Thu Mar 11 2004 mludvig@suse.cz - Update to 0.3rc2 -* Mon Mar 08 2004 - mludvig@suse.cz +* Mon Mar 08 2004 mludvig@suse.cz - Add sysconfig and init.d files. -* Fri Mar 05 2004 - mludvig@suse.cz +* Fri Mar 05 2004 mludvig@suse.cz - Include samples config files in the RPM. -* Thu Mar 04 2004 - mludvig@suse.cz +* Thu Mar 04 2004 mludvig@suse.cz - update to 0.3rc1 -* Tue Feb 03 2004 - mludvig@suse.cz +* Tue Feb 03 2004 mludvig@suse.cz - Update to 0.2.4 -* Mon Jan 26 2004 - ro@suse.de +* Tue Jan 27 2004 ro@suse.de - updated neededforbuild "kernel-source-26" -> "kernel-source" -* Thu Jan 15 2004 - mludvig@suse.cz +* Thu Jan 15 2004 mludvig@suse.cz - update to ipsec-tools-0.2.3 -* Sat Jan 10 2004 - adrian@suse.de +* Sun Jan 11 2004 adrian@suse.de - remove obsolete %%run_ldconfig -* Tue Dec 23 2003 - mludvig@suse.cz +* Tue Dec 23 2003 mludvig@suse.cz - Recognize IPSEC_DIR_FWD when dumping SPD. -* Fri Dec 19 2003 - mludvig@suse.cz +* Fri Dec 19 2003 mludvig@suse.cz - Added many fixes gathered from the mailing list. - Added support for specifying SA lifebytes. -* Wed Dec 17 2003 - garloff@suse.de +* Wed Dec 17 2003 garloff@suse.de - Package ipsec-tools 0.2.2. ++++++ ipsec-tools-0.7.tar.bz2 -> ipsec-tools-0.7.1.tar.bz2 ++++++ ++++ 42517 lines of diff (skipped) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org