- Thu Jul 23 2009 Michael Shigorin <mike@altlinux.org> 4.2.17-alt0.M41.1
- 4.2.17 built for M41:
+ the RDN parser vulnerability discovered by Orange Labs research team
was not completely fixed in version 4.2.16. Some more modifications
had to be applied to the asn1_length() function.
- thanks crux@ for prompt notification - Wed Jun 24 2009 Michael Shigorin <mike@altlinux.org> 4.2.16-alt0.M41.1
- built for M41
- reenabled %autoreconf - Tue Jun 23 2009 Michael Shigorin <mike@altlinux.org> 4.2.16-alt1
- 4.2.16 fixes DoS vulnerability in the ASN.1 parser;
thanks crux@ for notification (closes: #20527) - Thu May 28 2009 Michael Shigorin <mike@altlinux.org> 4.2.15-alt1
- 4.2.15 fixes two DoS issues with charon
+ sending a malformed IKE_SA_INIT request leaved an incomplete state
which caused a null pointer dereference if a subsequent
CREATE_CHILD_SA request was sent
+ sending an IKE_AUTH request with either a missing TSi or TSr payload
caused a null pointer derefence because the checks for TSi and TSr
were interchanged
+ patch2 unneeded (included upstream)
- thanks crux@ for heads-up (closes: #20206) - Wed May 13 2009 Michael Shigorin <mike@altlinux.org> 4.2.14-alt1
- 4.2.14 fixes CVE-2009-0790: DoS against dead peer detection code
- fixed FTBFS with glibc-2.9
- appled vendor patch fixing invalid IKE state issue - Sat Jan 10 2009 Michael Shigorin <mike@altlinux.org> 4.2.10-alt3
- added a patch to avoid superfluous file dependencies
- Thu Jan 8 2009 Michael Shigorin <mike@altlinux.org> 4.2.10-alt2
- fixed ntpd comments in initscript ;-)
- Thu Jan 8 2009 Michael Shigorin <mike@altlinux.org> 4.2.10-alt1
- 4.2.10
- removed patches (builds as is)
- spec cleanup - Wed Oct 10 2007 Grigory Milev <week@altlinux.ru> 4.1.6-alt2
- Rebuild for x86_64
- cleanup spec
- move libraries to separate package - Mon Sep 3 2007 $inister <sinister@altlinux.ru> 4.1.6-alt1
- new version
- Tue Aug 28 2007 $inister <sinister@altlinux.ru> 4.1.5-alt1
- initial packaging