lp:ubuntu/precise-security/ipsec-tools

Created by Ubuntu Package Importer on 2015-06-21 and last modified on 2015-06-21
Get this branch:
bzr branch lp:ubuntu/precise-security/ipsec-tools
Members of Ubuntu branches can upload to this branch. Log in for directions.

Branch merges

Related bugs

Related blueprints

Branch information

Owner:
Ubuntu branches
Review team:
Ubuntu Development Team
Status:
Mature

Recent revisions

31. By Marc Deslauriers on 2015-05-25

* SECURITY UPDATE: denial of service via racoon null dereference
  - debian/patches/CVE-2015-4047.patch: check iph1->rmconf in
    src/racoon/gssapi.c.
  - CVE-2015-4047

30. By Adam Gandelman on 2011-10-24

* Merge from Debian unstable (LP: #881097). Remaining changes:
   - debian/control: Depend on lsb-base
   - debian/rules: switch -U_FORTIFY_SOURCE for -D_FORTIFY_SOURCE=0
* Dropped changes:
   - Modify configure.ac to not convert -RXYZ to -Wl,-RXYZ, and regenerate
     configure (Applied in debian via configure-pass-Wl-with-R.patch)
   - debian/{racoon.init, ipsec-tools.setkey.init}: Re-write LSB init script
     (Fixed in Debian)

29. By Serge Hallyn on 2011-06-06

* Merge from debian unstable (LP: #787114), remaining changes:
  - debian/control: Depend on lsb-base
* Dropped patches, applied upstream:
  - debian/patches/fix-address-already-in-use.patch
  - fix-several-formating-errors-in-setkey-manpage.patch
* debian/rules: switch -U_FORTIFY_SOURCE for -D_FORTIFY_SOURCE=0, bc the
  latter breaks in oneiric, claiming _FORTIFY_SOURCE is redefined.
* Modify configure.ac to not convert -RXYZ to -Wl,-RXYZ, and regenerate
  configure.
* debian/ipsec-tools.setkey.init: Re-write LSB init script
* debian/racoon.init: LSB init script

28. By Lorenzo De Liso on 2010-11-24

[ Lorenzo De Liso ]
* Merge from debian unstable (LP: #681427), remaining changes:
  - debian/control: Depend on lsb-base
  - debian/ipsec-tools.setket.init: LSB init script.
  - debian/patches/fix-address-already-in-use.patch: Fix address already
    in use. (LP: #332606)
* Dropped changes:
  - debian/{control,rules}: add and enable hardening build for PIE
    (Debian bug 542731): fixed in debian
  - src/racoon/ipsec_doi.c: Patched to fix segfault when using
    ipv6 addresses in sainfo section of racoon.conf. Thanks to
    Fredrik Ljunggren. (LP: #374185): fixed upstream

[ Alessio Treglia ]
* Refresh Lorenzo's patch in order to make it apply cleanly,
  add patch header as per DEP-3 spec.
* Refresh fix-several-formating-errors-in-setkey-manpage.patch.

27. By Chuck Short on 2010-07-02

* Merge from debian/unstable:
  + debian/control:
    - Set Ubuntu maintainer address
    - Depend on lsb-base
  + debian/ipsec-tools.setket.init: LSB init script.
  + debian/{control,rules}: add and enable hardening build for PIE
    (Debian bug 542731)
  + src/racoon/ipsec_doi.c: Patched to fix segfault when using
    ipv6 addresses in sainfo section of racoon.conf. Thanks to
    Fredrik Ljunggren. (LP: #374185)
  + src/racoon/isakmp.c: Fix address already in use. (LP: #332606)

26. By Chuck Short on 2010-05-05

* Merge from debian unstable. Remaining changes:
  + debian/control:
    - Set Ubuntu maintainer address
    - Depend on lsb-base
  + debian/ipsec-tools.setket.init: LSB init script.
  + debian/{control,rules}: add and enable hardening build for PIE
    (Debian bug 542731)
  + src/racoon/ipsec_doi.c: Patched to fix segfault when using
    ipv6 addresses in sainfo section of racoon.conf. Thanks to
    Fredrik Ljunggren. (LP: #374185)
  + src/racoon/isakmp.c: Fix address already in use. (LP: #332606)

25. By Chuck Short on 2010-01-03

* Merge from debian testing. Remaining changes:
  - debian/control:
    - Set Ubuntu maintainer address.
    - Depend on lsb-base
  - debian/ipsec-tools.setkey.init: LSB init script.
  - Enable build with hardened options:
    - src/setkey/setkey.c: stop scanning stdin if fgets fails.
  - debian/{control,rules}: add and enable hardened build for PIE
    (Debian bug 542731).
  - src/racoon/ipsec_doi.c: Patched to fix segfault when using
    ipv6 addresses in sainfo section of racoon.conf. Thanks to
    Fredrik Ljunggren. (LP: #374185)
  - src/racoon/isakmp.c: Fix address already in use. (LP: #332606)

24. By Chuck Short on 2009-09-15

src/racoon/isakmp.c: Fix address already in use. (LP: #332606)

23. By Chuck Short on 2009-09-09

src/racoon/ipsec_doi.c: Patched to fix segfault when using
ipv6 addresses in sainfo section of racoon.conf. Thanks to
Fredrik Ljunggren. (LP: #374185)

22. By Kees Cook on 2009-08-20

debian/{control,rules}: add and enable hardened build for PIE
(Debian bug 542731).

Branch metadata

Branch format:
Branch format 7
Repository format:
Bazaar repository format 2a (needs bzr 1.16 or later)
Stacked on:
lp:ubuntu/wily/ipsec-tools
This branch contains Public information 
Everyone can see this information.

Subscribers