ipsec-tools 1:0.7.3-6ubuntu1 source package in Ubuntu

Changelog

ipsec-tools (1:0.7.3-6ubuntu1) maverick; urgency=low

  * Merge from debian unstable.  Remaining changes:
    + debian/control:
      - Set Ubuntu maintainer address
      - Depend on lsb-base
    + debian/ipsec-tools.setket.init: LSB init script.
    + debian/{control,rules}: add and enable hardening build for PIE
      (Debian bug 542731)
    + src/racoon/ipsec_doi.c: Patched to fix segfault when using
      ipv6 addresses in sainfo section of racoon.conf. Thanks to
      Fredrik Ljunggren. (LP: #374185)
    + src/racoon/isakmp.c: Fix address already in use. (LP: #332606)

ipsec-tools (1:0.7.3-6) unstable; urgency=low

  * Applied patch from Martin Fuzzey to fix failed to bind to address bug
    when using the phase1-up.sh script. Ubuntu Bug # 332606

ipsec-tools (1:0.7.3-5) unstable; urgency=low

  * Extented setkey init-script to be able to load setkey configurations
    from /etc/ipsec-tools.d/*.conf files (Closes: #519862)
    Patch supplied by Shane R. Spencer <email address hidden>
  * Mention undocumented feature esp-udp in setkey manpage (Closes: #550697)
  * Document lack of tcp-md5 support for setkey on linux (Closes: #389286)

ipsec-tools (1:0.7.3-4) unstable; urgency=low

  * Restart at the end of upgrade process to keep the connection in case
    of maintenance over ipsec (Closes: #307721)

ipsec-tools (1:0.7.3-3) unstable; urgency=low

  * Modified the racoon and ipsec-tool maintainer scripts to not flush the
    kernel SA/SD database on remove of racoon
  * Keep the kernel SA/SD entries on upgrade as well

ipsec-tools (1:0.7.3-2) unstable; urgency=low

  * Modify racoon startscript to not restart on reload (Closes: #529001)
  * Applied patch to support cast128-cbc algorithm - patch supplied by
    Hiroyuki YAMAMORI <email address hidden> (Closes: #242723)
  * Build with hardening options enabled (Closes: #542731)
    Patch supplied by Kees Cook <email address hidden>
  * Fix typo in FAQ (Closes: #561980)
  * Flush SA/SD kernel-database on purge/remove (Closes: #569949)

ipsec-tools (1:0.7.3-1) unstable; urgency=low

  * New Maintainer (Closes: #565362)
  * Acknowledge NMU changes
  * New upstream release
  * Fixed a NAT-T flag check
  * Some code cleanups/compilation fixes with recent gcc
  * Fix a remote crash and a memory leak
  * Fix memory leak in x509 certificate validation
  * Fix a potential DoS in oakley_do_decrypt()
  * Check fgets return value in setkey to make gcc happy
  * Backport S.P.Zeidler's fix to IPv6 address related stack smashing
  * Bump Standards to 3.8.4
  * Added {misc:Depends} for binary packages
  * Bump debhelper to 7.0.50~ to keep backports dependency
  * Fix typo in manpage
  * Stop racoon on runlevel 0 and 6 too
  * Get rid of dh_clean -k in favor of dh_prep
 -- Chuck Short <email address hidden>   Wed, 05 May 2010 02:26:50 +0100