[el5_u4_base] ipsec-tools-0.6.5-13.el5_3.1.i386

This is the IPsec-Tools package.  You need this package in order to
really use the IPsec functionality in the linux-2.5+ kernels.  This
package builds:

	- setkey, a program to directly manipulate policies and SAs
	- racoon, an IKEv1 keying daemon

Changelog (Show File list) (Show related packages)

• Tue May 05 2009 Tomas Mraz <tmraz@redhat.com> - 0.6.5-13.1

  - fix nul dereference in frag code and some memory leaks (#497990)

• Mon Sep 01 2008 Tomas Mraz <tmraz@redhat.com> - 0.6.5-13

  - also do not destroy ports in ph2 (#231604)

• Wed Aug 27 2008 Tomas Mraz <tmraz@redhat.com> - 0.6.5-12

  - improved fix for cleanup of IPSEC SAs in SADB (#231604)

• Wed Aug 13 2008 Tomas Mraz <tmraz@redhat.com> - 0.6.5-11

  - fix cleanup of IPSEC SAs in SADB (#231604)
  - fix segfault in timer (#378551)
  - handle new interfaces immediately (#247301)
  - eliminate debug logging overhead when log level is lower (#248567)
  - use the adminsock_path as specified on the command line (#247294)
  - link only necessary libraries (#458631)
  - make racoon PIE executable (#210023)
  - fix for DoS through various memory leaks (CVE-2008-3651 #456660,
    CVE-2008-3652 #458846)

• Thu May 29 2008 Tomas Mraz <tmraz@redhat.com> - 0.6.5-10

  - use the current kernel headers instead of the private copy (#446979)

• Wed Apr 02 2008 Linda Wang <lwang@redhat.com> - 0.6.5-9

  - Resolves: rhbz#435803 - update pfkeyv2.h with new #defines

• Mon Apr 23 2007 Steve Grubb <sgrubb@redhat.com> - 0.6.5-8

  - Upstream fix for Racoon DOS, informational delete must be encrypted
  - Resolves: rhbz#235388 - CVE-2007-1841 ipsec-tools racoon DoS

• Fri Apr 20 2007 Steve Grubb <sgrubb@redhat.com> - 0.6.5-7

  - Resolves: #218386 labeled ipsec does not work over loopback

• Mon Apr 16 2007 Steve Grubb <sgrubb@redhat.com> - 0.6.5-6.6

  - Related: #232508 add auditing to racoon

• Sat Apr 14 2007 Steve Grubb <sgrubb@redhat.com> - 0.6.5-6.5

  - Resolves: #235680 racoon socket descriptor exhaustion

• Thu Apr 12 2007 Steve Grubb <sgrubb@redhat.com> - 0.6.5-6.4

  - Resolves: #236121 increase buffer for context

• Tue Apr 10 2007 Steve Grubb <sgrubb@redhat.com> - 0.6.5-6.3

  - Resolves: #234491 kernel sends ACQUIRES that racoon is not catching
  - Resolves: #218386 labeled ipsec does not work over loopback

• Tue Mar 20 2007 Harald Hoyer <harald@redhat.com> - 0.6.5-6.2.el5_3

  - fix for setting the security context into a proposal (32<->64bit)
  - Resolves: rhbz#232508

• Sun Oct 01 2006 Jesse Keating <jkeating@redhat.com> - 0.6.5-6

  - rebuilt for unwind info generation, broken in gcc-4.1.1-21

• Mon Sep 25 2006 Harald Hoyer <harald@redhat.com> - 0.6.5-5

  - added patch for selinux integration (bug #207159)

• Fri Aug 04 2006 Harald Hoyer <harald@redhat.com> - 0.6.5-4

  - backport of important 0.6.6 fixes:
    - sets NAT-T ports to 0 if no NAT encapsulation
    - fixed memory leak

• Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 0.6.5-3.1

  - rebuild

• Wed Jun 21 2006 Harald Hoyer <harald@redhat.com> - 0.6.5-3

  - more build requirements

• Tue Apr 18 2006 Dan Walsh <dwalsh@redhat.com> - 0.6.5-2

  - Fix patch to build MLS Stuff correctly

• Tue Apr 18 2006 Dan Walsh <dwalsh@redhat.com> - 0.6.5-1

  - Update to latest upstream version
  - Add MLS Patch to allow use of labeled networks
  - Patch provided by Joy Latten <latten@austin.ibm.com>

• Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 0.6.4-1.1

  - bump again for double-long bug on ppc(64)

• Tue Feb 07 2006 Harald Hoyer <harald@redhat.com> 0.6.4-1

  - version 0.6.4

• Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 0.6.3-1.2

  - rebuilt for new gcc4.1 snapshot and glibc changes

• Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>

  - rebuilt

• Mon Dec 05 2005 Harald Hoyer <harald@redhat.com> 0.6.3-1

  - version 0.6.3, which contains fixes for various DoS problems

• Wed Nov 09 2005 Tomas Mraz <tmraz@redhat.com> 0.6.1-2

  - rebuilt against new openssl

• Wed Oct 12 2005 Harald Hoyer <harald@redhat.com> 0.6.1-1

  - version 0.6.1

• Mon Mar 28 2005 Bill Nottingham <notting@redhat.com> 0.5-4

  - fix 64-bit issue in setph1attr() (<aviro@redhat.com>)

• Mon Mar 14 2005 Bill Nottingham <notting@redhat.com> 0.5-3

  - add patch for DoS (CAN-2005-0398, #145532)

• Sat Mar 05 2005 Uwe Beck <ubeck@c3pdm.com> 0.5-2

  - now racoon use /etc/racoon/racoon.conf as default
  - add the /var/racoon directory for racoon.sock

• Wed Feb 23 2005 Bill Nottingham <notting@redhat.com> 0.5-1

  - update to 0.5

• Thu Nov 04 2004 Bill Nottingham <notting@redhat.com> 0.3.3-2

  - don't use new 0.3.3 handling of stdin in setkey; it breaks the
    format (#138105)

• Mon Sep 27 2004 Bill Nottingham <notting@redhat.com> 0.3.3-1

  - update to 0.3.3 (#122211)

• Sun Aug 08 2004 Alan Cox <alan@redhat.com> 0.2.5-6

  - fix buildreqs (Steve Grubb)

• Mon Jun 28 2004 Nalin Dahyabhai <nalin@redhat.com> 0.2.5-5

  - rebuild

• Fri Jun 25 2004 Nalin Dahyabhai <nalin@redhat.com> 0.2.5-4

  - backport certificate validation fixes from 0.3.3 (#126568)

• Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>

  - rebuilt

• Wed Apr 14 2004 Bill Nottingham <notting@redhat.com> - 0.2.5-2

  - add patch for potential remote DoS (CAN-2004-0403)

• Tue Apr 06 2004 Bill Nottingham <notting@redhat.com>

  - update to 0.2.5

• Tue Mar 02 2004 Elliot Lee <sopwith@redhat.com>

  - rebuilt

• Mon Feb 23 2004 Bill Nottingham <notting@redhat.com>

  - update to 0.2.4, fix racoon install location (#116374, <kajtzu@fi.basen.net>)

• Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>

  - rebuilt

• Mon Dec 08 2003 Bill Nottingham <notting@redhat.com> 0.2.2-8

  - rebuild

• Fri Aug 29 2003 Bill Nottingham <notting@redhat.com> 0.2.2-7

  - add fix for #103238

• Tue Aug 05 2003 Bill Nottingham <notting@redhat.com> 0.2.2-6

  - update kernel interface bits, rebuild against them

• Tue Jul 29 2003 Bill Nottingham <notting@redhat.com> 0.2.2-5

  - rebuild

• Wed Jul 02 2003 Bill Notitngham <notting@redhat.com> 0.2.2-4

  - ship a much more pared-down racoon.conf and psk.txt

• Thu Jun 05 2003 Bill Notitngham <notting@redhat.com> 0.2.2-3

  - update pfkey header for current kernels

• Wed Jun 04 2003 Elliot Lee <sopwith@redhat.com>

  - rebuilt

• Fri May 02 2003 Bill Nottingham <notting@redhat.com> 0.2.2-1

  - update to 0.2.2

• Fri Mar 07 2003 Bill Nottingham <notting@redhat.com>

  - initial build