~ubuntu-branches/debian/lenny/openswan/lenny : changes

~ubuntu-branches/debian/lenny/openswan/lenny » Changes from revision 14

From Revision 14

Rev	Summary	Authors	Tags	Date
14	Depend on libcurl4-openssl-dev instead of libcurl3-dev, othe... Depend on libcurl4-openssl-dev instead of libcurl3-dev, otherwise sbuild fails to install the needed deps	Moritz Muehlenhoff	1:2.4.12+dfsg-1.3+lenny4	12 years ago
13	Maintainer-prepared security fix, using patch from Giuseppe ... Maintainer-prepared security fix, using patch from Giuseppe Iuculano <giuseppe@iuculano.it> (many thanks for preparing it!): * Fix ASN.1 parser bug that allows remote attackers to cause a DoS via an X.509 certificate with crafted Relative Distinguished Names (RDNs), a crafted UTCTIME string, or a crafted GENERALIZEDTIME string. 04-CVE-2009-2185.dpatch also cherry-picks commit 483f6bfd4a1b9e900cb352bb4214ec1ce20016b7 from the openswan-2 git to complete the CVE fix. Fixes: CVE-2009-2185 Closes: #533837: two denial of service vulnerabilities * Added patch to fix KLIPS compilation for kernel 2.6.26. Thanks to Harald Jenny for providing this patch! Closes: #522112: openswan-modules-source: Fails to build with kernel 2.6.26	Rene Mayrhofer	1:2.4.12+dfsg-1.3+lenny2	14 years ago
12	* Non-maintainer upload by the security team * Non-maintainer upload by the security team * Fix DoS issue via malicious Dead Peer Detection packet Fixes: CVE-2009-0790	Steffen Joeris	1:2.4.12+dfsg-1.3+lenny1	15 years ago
11	* Non-maintainer upload. * Non-maintainer upload. * Fix insucure /tmp file creation. Patch by Frank Lichtenheld (untested from his own words but better this than nothing) Closes: #496374 * Fix pending l10n bugs. Debconf translations: * Czech. Closes: #489437	Christian Perrier	1:2.4.12+dfsg-1.3	15 years ago
10	* Acknowledge our-priority-are-the-users-thus-remove-docs NM... * Acknowledge our-priority-are-the-users-thus-remove-docs NMU (nothing personal, but documentation usually tends to be useful). Closes: #390656 * Recommend linux-source instead of kernel-source. Closes: #394664: Recommends unavailable kernel-source * Update Japanese debconf translation. Closes: #393176: openswan: [INTL:ja] Updated Japanese po-debconf template translation (ja.po) * Build-depend on po-debconf. * Stop invoking /etc/init.d/ipsec directly in prerm. Use invoke-rc.d.	Rene Mayrhofer	1:2.4.6+dfsg.2-1	17 years ago
9	* NMU * NMU * Remove additional non-free draft RFCs from upstream tarball. Closes: #390656	Joey Hess	1:2.4.6+dfsg.2-0.1	17 years ago
8	* Non-maintainer upload. * Non-maintainer upload. * debian/patches/01-ipcomp_hippi.dpatch: Fix net/ipsec/ipcomp.c so it no longer attempts to copy the "private" field of a struct_skbuff when CONFIG_HIPPI is enabled; it was removed after 2.6.13, and this broke compilation with 2.6.16, linux-patch-openswan and CONFIG_HIPPI. (Closes: #363375)	Steinar H. Gunderson	1:2.4.5+dfsg-0.2	18 years ago
7	* pluto_crypt.c Patch for unaligned. * pluto_crypt.c Patch for unaligned. - Thanks to Dave Miller * Update build-dep to libopensc2-dev	Barry deFreese	1:2.4.4-3ubuntu1	18 years ago
6	Corrected PATCHNAME in the kernel-patch-openswan unpatch scr... Corrected PATCHNAME in the kernel-patch-openswan unpatch script. Closes: #344852: kernel-patch-openswan: PATCHNAME=openswan in apply script but =freeswan in unpatch	Rene Mayrhofer	1:2.4.4-3	18 years ago
5	Reasoning for urgency high: DoS security issues. Reasoning for urgency high: DoS security issues. New upstream version. This is supposed to fix the other part of the DoS problem.	Rene Mayrhofer	1:2.4.4-1	18 years ago
4	* Module building has changed a bit for the new openswan ups... * Module building has changed a bit for the new openswan upstream releases (need additional files). Adapt the openswan-modules-source package to that and also fix pfkey_v2.c to compile with kernel 2.4 (patches sent to upstream for future inclusion). Closes: #291274: Fails to build with 2.4.29: missing Makefile Closes: #273443: openswan-modules-source: doesn't build with 2.6.8 - different from #273144 (?) * Fix the postinst script (must have been a bash update that broke it). Closes: #330864: openswan: postinst fails with "`make-x509-cert': not a valid identifier"	Rene Mayrhofer	1:2.4.0-2	18 years ago
3	Urgency HIGH due to security issue and problems with build-d... Urgency HIGH due to security issue and problems with build-deps in sarge. * Fix the security issue. Please see http://www.idefense.com/application/poi/display?id=190& type=vulnerabilities&flashstatus=false for more details. Thanks to Martin Schulze for informing me about this issue. Closes: #292458: Openswan XAUTH/PAM Buffer Overflow Vulnerability * Added a Build-Dependency to lynx. Closes: #291143: openswan: FTBFS: Missing build dependency.	Rene Mayrhofer	2.3.0-2	19 years ago
2	Urgency high because of a possibly security issue. Urgency high because of a possibly security issue. * New upstream version. This includes the CRL fix form 2.1.1-5 and the proper activation of NAT traversal in Makefile.inc. Closes: #253457: Openswan: new upstream available that includes xauth Closes: #253458: Openswan: new upstream available that includes xauth Closes: #253461: Openswan: new upstream available Closes: #253782: openswan: Should automatically load kernel module xfrm_user But I have currently not explicitly enabled xaut support in Makefile.inc, quoting from there: "off by default, since XAUTH is tricky, and you can get into security trouble". If it needs to be enabled to work, please tell me and I will need to take a far closer look on it (and the involved problems). This new upstream version also fixes a possible security issue in the X.509 certificate authentication. * The last upload didn't seem to have hit the archives, strange... However, the bugs are still fixed, closing them now. Closes: #245450: openswan should not depend on kernel-image-2.4 \|\| kernel-image-2.6 Closes: #246847: openswan: shouldn't conflict with ike-server Closes: #246373: openswan: [INTL:fr] French debconf templates translation	Rene Mayrhofer	2.1.3-1	20 years ago
1	Import upstream version 2.1.3 Import upstream version 2.1.3	Rene Mayrhofer	upstream-2.1.3	20 years ago