~raharper/ubuntu/+source/strongswan:master

Branch merges

Related source package recipes

1 recipe using this branch. (?)

Create packaging recipe

Related snap packages

Related charm recipes

c7bb6df... by Ryan Harper on 2016-01-22

Merge branch 'master' of git+ssh://git.launchpad.net/~raharper/ubuntu/+source/strongswan

ae8c188... by Ryan Harper on 2016-01-13

strongswan (5.1.2-0ubuntu8) - import FTBFS fix for s390x from Debian 5.1.2-3

  * Import FTBFS for s390x from Debian 5.1.2-3 upload. (LP: #1521240)

 -- Dimitri John Ledkov <email address hidden> Mon, 30 Nov 2015 15:46:06 +0000

cfb2493... by Ryan Harper on 2016-01-13

strongswan (5.1.2-0ubuntu7) - disable ntru_test causing FTBFS

  * debian/patches/disable_ntru_test.patch: disable test causing FTBFS
    until regression is properly investigated.

 -- Marc Deslauriers <email address hidden> Thu, 19 Nov 2015 14:00:17 -0500

f3cda34... by Ryan Harper on 2016-01-13

strongswan (5.1.2-0ubuntu7) - (security) debian/patches/CVE-2015-8023.patch

  * SECURITY UPDATE: authentication bypass in eap-mschapv2 plugin
    - debian/patches/CVE-2015-8023.patch: only succeed authentication if
      MSK was established in
      src/libcharon/plugins/eap_mschapv2/eap_mschapv2.c.
    - CVE-2015-8023

 -- Marc Deslauriers <email address hidden> Thu, 19 Nov 2015 14:00:17 -0500

3a98bf7... by Ryan Harper on 2016-01-13

strongswan (5.1.2-0ubuntu6) - debian/rules remove unused service file

  * debian/rules: don't FTBFS from unused service file

 -- Marc Deslauriers <email address hidden> Mon, 08 Jun 2015 12:50:38 -0400

3b10b5a... by Ryan Harper on 2016-01-13

strongswan (5.1.2-0ubuntu6) - (security) debian/patches/CVE-2015-4171.patch

  * SECURITY UPDATE: user credential disclosure to rogue servers
    - debian/patches/CVE-2015-4171.patch: enforce remote authentication
      config before proceeding with own authentication in
      src/libcharon/sa/ikev2/tasks/ike_auth.c.
    - CVE-2015-4171

 -- Marc Deslauriers <email address hidden> Mon, 08 Jun 2015 12:50:38 -0400

b815e19... by Ryan Harper on 2016-01-13

strongswan (5.1.2-0ubuntu5) - debian/control - add systemd unit

  * Add a systemd unit corresponding to strongswan-starter.strongswan.upstart.

 -- Martin Pitt <email address hidden> Fri, 16 Jan 2015 08:27:54 +0100

d7d3df9... by Ryan Harper on 2016-01-13

strongswan (5.1.2-0ubuntu4) - (security) debian/patches/CVE-2014-9221.patch

  * SECURITY UPDATE: denial of service via DH group 1025
    - debian/patches/CVE-2014-9221.patch: define MODP_CUSTOM outside of
      IKE DH range in src/libstrongswan/crypto/diffie_hellman.c,
      src/libstrongswan/crypto/diffie_hellman.h.
    - CVE-2014-9221

 -- Tyler Hicks <email address hidden> Mon, 05 Jan 2015 08:25:29 -0500

81c7550... by Ryan Harper on 2016-01-13

strongswan (5.1.2-0ubuntu3) utopic; urgency=low

  * Added "libgcrypt20-dev | libgcrypt11-dev" to build dependencies to fix
    build.

 -- Jonathan Davies <email address hidden> Wed, 15 Oct 2014 16:49:18 +0000

a2600ac... by Ryan Harper on 2016-01-13

strongswan (5.1.2-0ubuntu2) - (security) debian/patches/CVE-2014-2338.patch

  * SECURITY UPDATE: remote authentication bypass
    - debian/patches/CVE-2014-2338.patch: reject CREATE_CHILD_SA exchange
      on unestablished IKE_SAs in src/libcharon/sa/ikev2/task_manager_v2.c.
    - CVE-2014-2338

 -- Marc Deslauriers <email address hidden> Mon, 14 Apr 2014 11:24:34 -0400