[ubuntu/maverick] ipsec-tools 1:0.7.3-6ubuntu1 (Accepted)

Tue May 18 14:40:16 BST 2010

ipsec-tools (1:0.7.3-6ubuntu1) maverick; urgency=low

  * Merge from debian unstable.  Remaining changes:
    + debian/control:
      - Set Ubuntu maintainer address
      - Depend on lsb-base
    + debian/ipsec-tools.setket.init: LSB init script.
    + debian/{control,rules}: add and enable hardening build for PIE
      (Debian bug 542731)
    + src/racoon/ipsec_doi.c: Patched to fix segfault when using
      ipv6 addresses in sainfo section of racoon.conf. Thanks to
      Fredrik Ljunggren. (LP: #374185)
    + src/racoon/isakmp.c: Fix address already in use. (LP: #332606)

ipsec-tools (1:0.7.3-6) unstable; urgency=low

  * Applied patch from Martin Fuzzey to fix failed to bind to address bug
    when using the phase1-up.sh script. Ubuntu Bug # 332606

ipsec-tools (1:0.7.3-5) unstable; urgency=low

  * Extented setkey init-script to be able to load setkey configurations
    from /etc/ipsec-tools.d/*.conf files (Closes: #519862)
    Patch supplied by Shane R. Spencer <shane at bogomip.com>
  * Mention undocumented feature esp-udp in setkey manpage (Closes: #550697)
  * Document lack of tcp-md5 support for setkey on linux (Closes: #389286)

ipsec-tools (1:0.7.3-4) unstable; urgency=low

  * Restart at the end of upgrade process to keep the connection in case
    of maintenance over ipsec (Closes: #307721)

ipsec-tools (1:0.7.3-3) unstable; urgency=low

  * Modified the racoon and ipsec-tool maintainer scripts to not flush the
    kernel SA/SD database on remove of racoon
  * Keep the kernel SA/SD entries on upgrade as well

ipsec-tools (1:0.7.3-2) unstable; urgency=low

  * Modify racoon startscript to not restart on reload (Closes: #529001)
  * Applied patch to support cast128-cbc algorithm - patch supplied by
    Hiroyuki YAMAMORI <h-yamamo at db3.so-net.ne.jp> (Closes: #242723)
  * Build with hardening options enabled (Closes: #542731)
    Patch supplied by Kees Cook <kees at debian.org>
  * Fix typo in FAQ (Closes: #561980)
  * Flush SA/SD kernel-database on purge/remove (Closes: #569949)

ipsec-tools (1:0.7.3-1) unstable; urgency=low

  * New Maintainer (Closes: #565362)
  * Acknowledge NMU changes
  * New upstream release
  * Fixed a NAT-T flag check
  * Some code cleanups/compilation fixes with recent gcc
  * Fix a remote crash and a memory leak
  * Fix memory leak in x509 certificate validation
  * Fix a potential DoS in oakley_do_decrypt()
  * Check fgets return value in setkey to make gcc happy
  * Backport S.P.Zeidler's fix to IPv6 address related stack smashing
  * Bump Standards to 3.8.4
  * Added {misc:Depends} for binary packages
  * Bump debhelper to 7.0.50~ to keep backports dependency
  * Fix typo in manpage
  * Stop racoon on runlevel 0 and 6 too
  * Get rid of dh_clean -k in favor of dh_prep

Date: Wed, 05 May 2010 02:26:50 +0100
Changed-By: Chuck Short <zulcss at ubuntu.com>
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Chuck Short <chuck.short at canonical.com>
https://launchpad.net/ubuntu/maverick/+source/ipsec-tools/1:0.7.3-6ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Wed, 05 May 2010 02:26:50 +0100
Source: ipsec-tools
Binary: ipsec-tools racoon
Architecture: source
Version: 1:0.7.3-6ubuntu1
Distribution: maverick
Urgency: low
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Chuck Short <zulcss at ubuntu.com>
Description: 
 ipsec-tools - IPsec tools for Linux
 racoon     - IPsec IKE keying daemon
Closes: 242723 307721 389286 519862 529001 542731 550697 561980 565362 569949
Launchpad-Bugs-Fixed: 332606 374185
Changes: 
 ipsec-tools (1:0.7.3-6ubuntu1) maverick; urgency=low
 .
   * Merge from debian unstable.  Remaining changes:
     + debian/control:
       - Set Ubuntu maintainer address
       - Depend on lsb-base
     + debian/ipsec-tools.setket.init: LSB init script.
     + debian/{control,rules}: add and enable hardening build for PIE
       (Debian bug 542731)
     + src/racoon/ipsec_doi.c: Patched to fix segfault when using
       ipv6 addresses in sainfo section of racoon.conf. Thanks to
       Fredrik Ljunggren. (LP: #374185)
     + src/racoon/isakmp.c: Fix address already in use. (LP: #332606)
 .
 ipsec-tools (1:0.7.3-6) unstable; urgency=low
 .
   * Applied patch from Martin Fuzzey to fix failed to bind to address bug
     when using the phase1-up.sh script. Ubuntu Bug # 332606
 .
 ipsec-tools (1:0.7.3-5) unstable; urgency=low
 .
   * Extented setkey init-script to be able to load setkey configurations
     from /etc/ipsec-tools.d/*.conf files (Closes: #519862)
     Patch supplied by Shane R. Spencer <shane at bogomip.com>
   * Mention undocumented feature esp-udp in setkey manpage (Closes: #550697)
   * Document lack of tcp-md5 support for setkey on linux (Closes: #389286)
 .
 ipsec-tools (1:0.7.3-4) unstable; urgency=low
 .
   * Restart at the end of upgrade process to keep the connection in case
     of maintenance over ipsec (Closes: #307721)
 .
 ipsec-tools (1:0.7.3-3) unstable; urgency=low
 .
   * Modified the racoon and ipsec-tool maintainer scripts to not flush the
     kernel SA/SD database on remove of racoon
   * Keep the kernel SA/SD entries on upgrade as well
 .
 ipsec-tools (1:0.7.3-2) unstable; urgency=low
 .
   * Modify racoon startscript to not restart on reload (Closes: #529001)
   * Applied patch to support cast128-cbc algorithm - patch supplied by
     Hiroyuki YAMAMORI <h-yamamo at db3.so-net.ne.jp> (Closes: #242723)
   * Build with hardening options enabled (Closes: #542731)
     Patch supplied by Kees Cook <kees at debian.org>
   * Fix typo in FAQ (Closes: #561980)
   * Flush SA/SD kernel-database on purge/remove (Closes: #569949)
 .
 ipsec-tools (1:0.7.3-1) unstable; urgency=low
 .
   * New Maintainer (Closes: #565362)
   * Acknowledge NMU changes
   * New upstream release
   * Fixed a NAT-T flag check
   * Some code cleanups/compilation fixes with recent gcc
   * Fix a remote crash and a memory leak
   * Fix memory leak in x509 certificate validation
   * Fix a potential DoS in oakley_do_decrypt()
   * Check fgets return value in setkey to make gcc happy
   * Backport S.P.Zeidler's fix to IPv6 address related stack smashing
   * Bump Standards to 3.8.4
   * Added {misc:Depends} for binary packages
   * Bump debhelper to 7.0.50~ to keep backports dependency
   * Fix typo in manpage
   * Stop racoon on runlevel 0 and 6 too
   * Get rid of dh_clean -k in favor of dh_prep
Checksums-Sha1: 
 fd12e467bfa77ae73959c174f710f111555f6f4b 1249 ipsec-tools_0.7.3-6ubuntu1.dsc
 242a7ef2cbc22ed3a9394048b98ad781c492b7c2 1050381 ipsec-tools_0.7.3.orig.tar.gz
 8ac146a5d2c75a5e3fa41d03e63a63498f62a54c 55844 ipsec-tools_0.7.3-6ubuntu1.diff.gz
Checksums-Sha256: 
 3f5ba563bd9de8ecb5de98e28fe8bfa32abd4599280ba60e526604df0702591c 1249 ipsec-tools_0.7.3-6ubuntu1.dsc
 82be954a89ec234b35a791824f488e5cf7d4ef3a689e32ad327eb5b9b752b041 1050381 ipsec-tools_0.7.3.orig.tar.gz
 bddf4ce4a0a0a43856a0dd85e8cfeb35102aab4da8091e5bc73c6f70ecd81793 55844 ipsec-tools_0.7.3-6ubuntu1.diff.gz
Files: 
 ce8c95580f74bd6b3c1fc5f506ec921d 1249 net extra ipsec-tools_0.7.3-6ubuntu1.dsc
 baa1a6c5f7928cd6a4f445a4cbfca163 1050381 net extra ipsec-tools_0.7.3.orig.tar.gz
 351e61a7304074cf7907e5643d71f9ca 55844 net extra ipsec-tools_0.7.3-6ubuntu1.diff.gz
Original-Maintainer: Stefan Bauer <stefan.bauer at cubewerk.de>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkvylv8ACgkQIHZ33voUATtnewCfYZY2Cn1vzrNF0P6UjCyNsTF5
5fAAn2kzJb/+wKl5AGVRW6UwZAKsAYmw
=wLrt
-----END PGP SIGNATURE-----