-
Tue Nov 03 2015 Kevin Lyons <kevin.x.lyons@oracle.com> - 3.15-5.0.1
- add libreswan-oracle.patch to detect Oracle Linux distro
-
Wed Oct 21 2015 Paul Wouters <pwouters@redhat.com> - 3.15-5
- Resolves: rhbz#1273719 libreswan FIPS test mistakenly looks for non-existent file hashes
-
Wed Oct 07 2015 Paul Wouters <pwouters@redhat.com> - 3.15-4
- Resolves: rhbz#1268775 libreswan should support strictcrlpolicy alias
- Resolves: rhbz#1268776 Pluto crashes after stop when I use floating ip address
- Resolves: rhbz#1268773 Pluto crashes on INITIATOR site during 'service ipsec stop'
- Resolves: rhbz#1208022 libreswan ignores module blacklist rules
- Resolves: rhbz#1270673 ipsec does not work properly on loopback
-
Tue Sep 15 2015 Paul Wouters <pwouters@redhat.com> - 3.15-2
- Resolves: rhbz#1259208 CVE-2015-3240
- Merge rhel6 and rhel7 spec into one
- Be lenient for racoon padding behaviour
- Fix seedev option to /dev/random
- Some IKEv1 PAM methods always gave 'Permission denied'
- Parser workarounds for differences in gcc/flex/bison on rhel6/rhel7
- Parser fix to allow specifying time without unit (openswan compat)
- Fix Labeled IPsec on rekeyed IPsec SA's
- Workaround for wrong padding by racoon2
- Disable NSS HW GCM to workaround rhel6 xen builers bug
-
Fri May 29 2015 Paul Wouters <pwouters@redhat.com> - 3.12-10.1
- Resolves: rhbz#1226407 CVE-2015-3204 libreswan: crafted IKE packet causes daemon restart
-
Tue May 05 2015 Paul Wouters <pwouters@redhat.com> - 3.12-10
- Resolves: rhbz#1213652 Support CAVS [updated another prf() free symkey, bogus fips mode fix]
-
Tue Apr 28 2015 Paul Wouters <pwouters@redhat.com> - 3.12-9
- Resolves: rhbz#1213652 Support CAVS [updated to kill another copy of prf()]
- Resolves: rhbz#1208023 Libreswan with IPv6 [updated patch by Jaroslav Aster]
- Resolves: rhbz#1208022 libreswan ignores module blacklist [updated modprobe handling]
-
Mon Apr 20 2015 Paul Wouters <pwouters@redhat.com> - 3.12-8
- Resolves: rhbz#1213652 Support CAVS testing of the PRF/PRF+ functions
-
Mon Apr 13 2015 Paul Wouters <pwouters@redhat.com> - 3.12-7
- Resolves: rhbz#1208022 libreswan ignores module blacklist rules
- Resolves: rhbz#1208023 Libreswan with IPv6 in RHEL7 fails after reboot
- Resolves: rhbz#1211146 pluto crashes in fips mode
-
Tue Mar 17 2015 Paul Wouters <pwouters@redhat.com> - 3.12-6
- Resolves: rhbz#1198650 SELinux context string size limit
- Resolves: rhbz#1198649 Add new option for BSI random requirement