~ahasenack/ubuntu/+source/strongswan:noble-strongswan-merge-1

Last commit made on 2024-01-04
Get this branch:
git clone -b noble-strongswan-merge-1 https://git.launchpad.net/~ahasenack/ubuntu/+source/strongswan
Only Andreas Hasenack can upload to this branch. If you are Andreas Hasenack please log in for upload directions.

Branch merges

Branch information

Name:
noble-strongswan-merge-1
Repository:
lp:~ahasenack/ubuntu/+source/strongswan

Recent commits

07b4dc4... by Andreas Hasenack

update-maintainer

8f240d2... by Andreas Hasenack

reconstruct-changelog

6153229... by Andreas Hasenack

merge-changelogs

9245974... by Andreas Hasenack

  * Dropped:
    - SECURITY UPDATE: Buffer Overflow When Handling DH Public Values
      + debian/patches/CVE-2023-41913.patch: Validate DH public key to fix
        potential buffer overflow in
        src/charon-tkm/src/tkm/tkm_diffie_hellman.c.
      + CVE-2023-41913
      [Fixed upstream in 5.9.12]

edfbcd1... by Andreas Hasenack

    - d/usr.sbin.swanctl: allow "m" flag for /usr/sbin/swanctl
      (LP: #1999935)

ab609fa... by Andreas Hasenack

Host-to-host DEP8 test.

This test relies heavily on the setup we get with the lxd snap. Making
it work on debian is not straightforward, thus it was not forwarded yet.

--CL--

    - d/t/{control,host-to-host,utils}: new host-to-host test
      (LP: #1999525)

8fdb966... by Andreas Hasenack

    - Remove conf files of plugins removed from libcharon-extra-plugins
      + The conf file of the following plugins were removed: eap-aka-3gpp2,
        eap-sim-file, eap-sim-pcsc, eap-sim, eap-simaka-pseudonym,
        eap-simaka-reauth, eap-simaka-sql, xauth-noauth.
      + Created d/libcharon-extra-plugins.maintscript to handle the removals
        properly.

dc2e644... by Andreas Hasenack

    - Re-enable eap-{dynamic,peap} libcharon plugins (LP #1878887)
      + d/control: update libcharon-extra-plugins description.
      + d/libcharon-extra-plugins.install: install .so and conf files.
      + d/rules: add plugins to the configuration arguments.

a8bc127... by Andreas Hasenack

    - re-add post-quantum encryption algorithm (NTRU) (LP #1863749)
      + d/control: mention plugins in package description
      + d/rules: enable ntru at build time
      + d/libstrongswan-extra-plugins.install: ship config and shared objects

917a238... by Andreas Hasenack

    - d/control: strongswan-starter hard-depends on strongswan-charon,
      therefore bump the dependency from Recommends to Depends. At the same
      time avoid a circular dependency by dropping
      strongswan-charon->strongswan-starter from Depends to Recommends as the
      binaries can work without the services but not vice versa.