[ol5_u11_base] ipsec-tools-0.6.5-14.el5_8.5.x86_64

Name:	ipsec-tools
Version:	0.6.5
Release:	14.el5_8.5
Architecture:	x86_64
Group:	System Environment/Base
Size:	874719
License:	BSD
RPM:	ipsec-tools-0.6.5-14.el5_8.5.x86_64.rpm
Source RPM:	ipsec-tools-0.6.5-14.el5_8.5.src.rpm
Build Date:	Tue Sep 11 2012
Build Host:	ca-build56.us.oracle.com
Vendor:	Oracle America
URL:	http://ipsec-tools.sourceforge.net/
Summary:	Tools for configuring and using IPSEC
Description:	This is the IPsec-Tools package. You need this package in order to really use the IPsec functionality in the linux-2.5+ kernels. This package builds: - setkey, a program to directly manipulate policies and SAs - racoon, an IKEv1 keying daemon

Changelog (Show File list) (Show related packages)

Wed Aug 29 2012 Tomas Mraz <tmraz@redhat.com> - 0.6.5-14.5

- do not dereference ph1 when it might be NULL
- increase the default pfkey socket buffer size and never decrease it

Fri Aug 20 2010 Tomas Mraz <tmraz@redhat.com> - 0.6.5-14.4
```
- improve the pfkey socket buffer size setting (#607361)
```

Mon Jun 28 2010 Tomas Mraz <tmraz@redhat.com> - 0.6.5-14.3

- fix non-exact policy matching (#606904)
- make pfkey socket buffer size configurable (#607361)

Tue Jun 08 2010 Tomas Mraz <tmraz@redhat.com> - 0.6.5-14.2

- use separate pfkey socket for sadb dumps (#590783)
- do not delete phase 2 SAs when phase 1 delete notification is received (#599115)

Tue May 05 2009 Tomas Mraz <tmraz@redhat.com> - 0.6.5-14

- fix nul dereference in frag code and some memory leaks (#497990)

Mon Sep 01 2008 Tomas Mraz <tmraz@redhat.com> - 0.6.5-13
```
- also do not destroy ports in ph2 (#231604)
```

Wed Aug 27 2008 Tomas Mraz <tmraz@redhat.com> - 0.6.5-12

- improved fix for cleanup of IPSEC SAs in SADB (#231604)

Wed Aug 13 2008 Tomas Mraz <tmraz@redhat.com> - 0.6.5-11

- fix cleanup of IPSEC SAs in SADB (#231604)
- fix segfault in timer (#378551)
- handle new interfaces immediately (#247301)
- eliminate debug logging overhead when log level is lower (#248567)
- use the adminsock_path as specified on the command line (#247294)
- link only necessary libraries (#458631)
- make racoon PIE executable (#210023)
- fix for DoS through various memory leaks (CVE-2008-3651 #456660,
  CVE-2008-3652 #458846)

Thu May 29 2008 Tomas Mraz <tmraz@redhat.com> - 0.6.5-10

- use the current kernel headers instead of the private copy (#446979)

Wed Apr 02 2008 Linda Wang <lwang@redhat.com> - 0.6.5-9

- Resolves: rhbz#435803 - update pfkeyv2.h with new #defines

Mon Apr 23 2007 Steve Grubb <sgrubb@redhat.com> - 0.6.5-8

- Upstream fix for Racoon DOS, informational delete must be encrypted
- Resolves: rhbz#235388 - CVE-2007-1841 ipsec-tools racoon DoS

Fri Apr 20 2007 Steve Grubb <sgrubb@redhat.com> - 0.6.5-7

- Resolves: #218386 labeled ipsec does not work over loopback

Mon Apr 16 2007 Steve Grubb <sgrubb@redhat.com> - 0.6.5-6.6
```
- Related: #232508 add auditing to racoon
```
Sat Apr 14 2007 Steve Grubb <sgrubb@redhat.com> - 0.6.5-6.5
```
- Resolves: #235680 racoon socket descriptor exhaustion
```
Thu Apr 12 2007 Steve Grubb <sgrubb@redhat.com> - 0.6.5-6.4
```
- Resolves: #236121 increase buffer for context
```

Tue Apr 10 2007 Steve Grubb <sgrubb@redhat.com> - 0.6.5-6.3

- Resolves: #234491 kernel sends ACQUIRES that racoon is not catching
- Resolves: #218386 labeled ipsec does not work over loopback

Tue Mar 20 2007 Harald Hoyer <harald@redhat.com> - 0.6.5-6.2.el5_8

- fix for setting the security context into a proposal (32<->64bit)
- Resolves: rhbz#232508

Sun Oct 01 2006 Jesse Keating <jkeating@redhat.com> - 0.6.5-6
```
- rebuilt for unwind info generation, broken in gcc-4.1.1-21
```
Mon Sep 25 2006 Harald Hoyer <harald@redhat.com> - 0.6.5-5
```
- added patch for selinux integration (bug #207159)
```

Fri Aug 04 2006 Harald Hoyer <harald@redhat.com> - 0.6.5-4

- backport of important 0.6.6 fixes:
  - sets NAT-T ports to 0 if no NAT encapsulation
  - fixed memory leak

Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 0.6.5-3.1
```
- rebuild
```
Wed Jun 21 2006 Harald Hoyer <harald@redhat.com> - 0.6.5-3
```
- more build requirements
```
Tue Apr 18 2006 Dan Walsh <dwalsh@redhat.com> - 0.6.5-2
```
- Fix patch to build MLS Stuff correctly
```

Tue Apr 18 2006 Dan Walsh <dwalsh@redhat.com> - 0.6.5-1

- Update to latest upstream version
- Add MLS Patch to allow use of labeled networks
- Patch provided by Joy Latten <latten@austin.ibm.com>

Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 0.6.4-1.1
```
- bump again for double-long bug on ppc(64)
```
Tue Feb 07 2006 Harald Hoyer <harald@redhat.com> 0.6.4-1
```
- version 0.6.4
```
Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 0.6.3-1.2
```
- rebuilt for new gcc4.1 snapshot and glibc changes
```
Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
```
- rebuilt
```

Mon Dec 05 2005 Harald Hoyer <harald@redhat.com> 0.6.3-1

- version 0.6.3, which contains fixes for various DoS problems

Wed Nov 09 2005 Tomas Mraz <tmraz@redhat.com> 0.6.1-2
```
- rebuilt against new openssl
```
Wed Oct 12 2005 Harald Hoyer <harald@redhat.com> 0.6.1-1
```
- version 0.6.1
```
Mon Mar 28 2005 Bill Nottingham <notting@redhat.com> 0.5-4
```
- fix 64-bit issue in setph1attr() (<aviro@redhat.com>)
```
Mon Mar 14 2005 Bill Nottingham <notting@redhat.com> 0.5-3
```
- add patch for DoS (CAN-2005-0398, #145532)
```

Sat Mar 05 2005 Uwe Beck <ubeck@c3pdm.com> 0.5-2

- now racoon use /etc/racoon/racoon.conf as default
- add the /var/racoon directory for racoon.sock

Wed Feb 23 2005 Bill Nottingham <notting@redhat.com> 0.5-1
```
- update to 0.5
```

Thu Nov 04 2004 Bill Nottingham <notting@redhat.com> 0.3.3-2

- don't use new 0.3.3 handling of stdin in setkey; it breaks the
  format (#138105)

Mon Sep 27 2004 Bill Nottingham <notting@redhat.com> 0.3.3-1
```
- update to 0.3.3 (#122211)
```
Sun Aug 08 2004 Alan Cox <alan@redhat.com> 0.2.5-6
```
- fix buildreqs (Steve Grubb)
```
Mon Jun 28 2004 Nalin Dahyabhai <nalin@redhat.com> 0.2.5-5
```
- rebuild
```

Fri Jun 25 2004 Nalin Dahyabhai <nalin@redhat.com> 0.2.5-4

- backport certificate validation fixes from 0.3.3 (#126568)

Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
```
- rebuilt
```
Wed Apr 14 2004 Bill Nottingham <notting@redhat.com> - 0.2.5-2
```
- add patch for potential remote DoS (CAN-2004-0403)
```
Tue Apr 06 2004 Bill Nottingham <notting@redhat.com>
```
- update to 0.2.5
```
Tue Mar 02 2004 Elliot Lee <sopwith@redhat.com>
```
- rebuilt
```

Mon Feb 23 2004 Bill Nottingham <notting@redhat.com>

- update to 0.2.4, fix racoon install location (#116374, <kajtzu@fi.basen.net>)

Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
```
- rebuilt
```
Mon Dec 08 2003 Bill Nottingham <notting@redhat.com> 0.2.2-8
```
- rebuild
```
Fri Aug 29 2003 Bill Nottingham <notting@redhat.com> 0.2.2-7
```
- add fix for #103238
```
Tue Aug 05 2003 Bill Nottingham <notting@redhat.com> 0.2.2-6
```
- update kernel interface bits, rebuild against them
```
Tue Jul 29 2003 Bill Nottingham <notting@redhat.com> 0.2.2-5
```
- rebuild
```
Wed Jul 02 2003 Bill Notitngham <notting@redhat.com> 0.2.2-4
```
- ship a much more pared-down racoon.conf and psk.txt
```
Thu Jun 05 2003 Bill Notitngham <notting@redhat.com> 0.2.2-3
```
- update pfkey header for current kernels
```
Wed Jun 04 2003 Elliot Lee <sopwith@redhat.com>
```
- rebuilt
```
Fri May 02 2003 Bill Nottingham <notting@redhat.com> 0.2.2-1
```
- update to 0.2.2
```
Fri Mar 07 2003 Bill Nottingham <notting@redhat.com>
```
- initial build
```