libreswan (3.27-6+deb10u1) buster-security; urgency=high * Non-maintainer upload by the Security Team. * DoS attack via malicious IKEv1 informational exchange message (CVE-2020-1763) (Closes: #960458) -- Salvatore Bonaccorso Wed, 13 May 2020 05:33:51 +0200 libreswan (3.27-6) unstable; urgency=medium * fix CVE-2019-10155 (closes: #930338) -- Daniel Kahn Gillmor Mon, 10 Jun 2019 23:04:05 +0100 libreswan (3.27-5) unstable; urgency=medium * fix CVE-2019-12312 (Closes: #929916) * bump Standards-Version to 4.3.0 (no changes needed) -- Daniel Kahn Gillmor Mon, 03 Jun 2019 19:36:16 -0400 libreswan (3.27-4) unstable; urgency=medium * order object files for reproducible linking -- Daniel Kahn Gillmor Tue, 16 Oct 2018 10:27:14 -0400 libreswan (3.27-3) unstable; urgency=medium * explicitly set ARCH for reproducibility -- Daniel Kahn Gillmor Mon, 15 Oct 2018 16:07:00 -0400 libreswan (3.27-2) unstable; urgency=medium * avoid Curve25519 when building against nss that does not support it * backport patch from upstream to clean up ia64 build -- Daniel Kahn Gillmor Mon, 15 Oct 2018 13:21:24 -0400 libreswan (3.27-1) unstable; urgency=medium * New upstream release. -- Daniel Kahn Gillmor Fri, 12 Oct 2018 16:55:36 -0400 libreswan (3.26-1) unstable; urgency=medium * new upstream release (Closes: #909291) * refresh patches * import two patches from upstream to avoid FTBFS -- Daniel Kahn Gillmor Thu, 27 Sep 2018 19:24:35 -0400 libreswan (3.25-2) unstable; urgency=medium * remove explicit list of libraries from Depends (Closes: #909203) * bump Standards-Version to 4.2.1 (no changes needed) -- Daniel Kahn Gillmor Fri, 21 Sep 2018 02:35:42 -0400 libreswan (3.25-1) unstable; urgency=medium * new upstream release * refresh patches -- Daniel Kahn Gillmor Wed, 27 Jun 2018 12:46:44 -0400 libreswan (3.23-6) unstable; urgency=medium * avoid -fstack-protector-all on ia64 -- Daniel Kahn Gillmor Tue, 19 Jun 2018 22:39:57 -0400 libreswan (3.23-5) unstable; urgency=medium * move to DEP-14 branch naming * Standards-Version: bump to 4.1.4 (no changes needed) * d/rules: drop unneeded PUBDIR definitions * drop spelling-error lintian overrides about Antony Antony (no longer needed) -- Daniel Kahn Gillmor Mon, 18 Jun 2018 12:45:39 -0400 libreswan (3.23-4) unstable; urgency=medium * d/tests/control: isolation-container → isolation-machine -- Daniel Kahn Gillmor Thu, 15 Feb 2018 12:03:58 -0500 libreswan (3.23-3) unstable; urgency=medium * d/tests/opportunistic: more details on failure -- Daniel Kahn Gillmor Wed, 14 Feb 2018 13:08:09 -0500 libreswan (3.23-2) unstable; urgency=medium * d/tests/opportunistic: do not fail on initial systemctl status * d/control: Rules-Requires-Root: no -- Daniel Kahn Gillmor Tue, 13 Feb 2018 10:59:46 -0500 libreswan (3.23-1) unstable; urgency=medium [ Daniel Kahn Gillmor ] * New upstream release * drop patches already upstream, refresh remaining patches [ Antony Antony ] * tests/opportunistic fix, asymetric dnssec test [ Daniel Kahn Gillmor ] * d/copyright: Format: use https * d/copyright: remove dropped file * avoid lintian complaint by skipping my skipped test :P (override_dh_auto_test-does-not-check-DEB_BUILD_PROFILES) * quit persecuting Antony Antony, again * fix spelling -- Daniel Kahn Gillmor Mon, 05 Feb 2018 16:23:59 -0500 libreswan (3.22-4) unstable; urgency=medium * conflict with strongswan-libcharon (Closes: #886842) * Standards-Version: bump to 4.1.3 (no changes needed) * move to debhelper 11 * Vcs: move to salsa.debian.org * clean up lintian overrides -- Daniel Kahn Gillmor Wed, 10 Jan 2018 12:01:37 -0500 libreswan (3.22-3) unstable; urgency=medium * add more dependencies to autopkgtest -- Daniel Kahn Gillmor Mon, 13 Nov 2017 02:56:05 +0800 libreswan (3.22-2) unstable; urgency=medium * fix debian c-i test so that it can ping -- Daniel Kahn Gillmor Sat, 11 Nov 2017 15:46:44 +0800 libreswan (3.22-1) unstable; urgency=medium * new upstream release * drop patches already applied upstream * include two new patches as requested by upstream * include ipsec version from upstream release (Closes: #879614) * Standards-Version: bump to 4.1.1 (no changes needed) -- Daniel Kahn Gillmor Sat, 11 Nov 2017 14:02:02 +0800 libreswan (3.21-2) unstable; urgency=medium [ Antony Antony ] * add systemd build dependency * Revert "USE_DNSSEC=false b/c upstream needs libunbound to link to libevent" * up libunbound2 build dependency to 1.6.5 [ Daniel Kahn Gillmor ] * bump standards-version to 4.1.0 (no changes needed) * move to python3 instead of python * accept Antony Antony's name for real * avoid lintian griping that we cannot fix * fix spelling -- Daniel Kahn Gillmor Tue, 26 Sep 2017 02:39:40 -0400 libreswan (3.21-1) experimental; urgency=medium * New upstream release * use systemd presets for default-disabled service * ensure that /run/pluto exists * add dependency on iptables * update build-dependencies to match upstream expectations * Standards-Version: bump to 4.0.1 (no changes needed) * Initial attempt at autopkgtest * USE_DNSSEC=false b/c upstream needs libunbound to link to libevent (and it does not, see #871675) -- Daniel Kahn Gillmor Thu, 10 Aug 2017 23:24:56 -0400 libreswan (3.21~rc5-1) experimental; urgency=medium [ Daniel Kahn Gillmor ] * new upstream release-candidate * bump Standards-Version to 4.0.0 (no changes needed) [ Antony Antony ] * add dns-root-data dependency and use root.key from it -- Daniel Kahn Gillmor Mon, 26 Jun 2017 16:56:09 -0400 libreswan (3.21~rc2-1) experimental; urgency=medium * new upstream release-candidate -- Daniel Kahn Gillmor Fri, 02 Jun 2017 09:58:40 -0400 libreswan (3.20-7) unstable; urgency=medium [ Laurent Bigonville ] * Enable SELinux/LABELED_IPSEC support (Closes: #861881) * Only depends against libcap-ng-dev on linux (Closes: #861887) -- Daniel Kahn Gillmor Fri, 05 May 2017 12:46:31 -0400 libreswan (3.20-6) unstable; urgency=medium * another batch of fixes for time_t on x32 -- Daniel Kahn Gillmor Tue, 21 Mar 2017 16:15:33 -0400 libreswan (3.20-5) unstable; urgency=medium * no stack-protector on alpha either * more fixes for x32 and time_t -- Daniel Kahn Gillmor Tue, 21 Mar 2017 12:14:08 -0400 libreswan (3.20-4) unstable; urgency=medium * still more x32 time_t printf fixes -- Daniel Kahn Gillmor Mon, 20 Mar 2017 22:11:22 -0400 libreswan (3.20-3) unstable; urgency=medium * more fixes for printing time_t on x32 * fix hppa workaround -- Daniel Kahn Gillmor Mon, 20 Mar 2017 21:24:09 -0400 libreswan (3.20-2) unstable; urgency=medium * avoid time_t printf problems on x32 * avoid -fstack-protector-all for hppa -- Daniel Kahn Gillmor Mon, 20 Mar 2017 18:51:29 -0400 libreswan (3.20-1) unstable; urgency=medium * New upstream release (Closes: #853507) * drop build-dep on dh-systemd, since it is now in debhelper itself -- Daniel Kahn Gillmor Mon, 20 Mar 2017 14:58:40 -0400 libreswan (3.19-2) unstable; urgency=medium * more fixes from upstream * Test proposal for mips and mipsel builds (trying to fix: #853947) * conflict directly with strongswan-starter (Closes: #836862) -- Daniel Kahn Gillmor Fri, 03 Feb 2017 12:22:16 -0500 libreswan (3.19-1) unstable; urgency=medium * drop patches already applied upstream, clean up remaining patches * cleaner build without KLIPS * fix spelling errors found by lintian * convert to debhelper 10 * use wrap-and-sort -ast to canonicalize debian metadata files * upload to unstable for wider testing -- Daniel Kahn Gillmor Wed, 25 Jan 2017 20:14:04 -0500 libreswan (3.18-1) experimental; urgency=low * Initial upload to debian experimental (Closes: #773459) -- Daniel Kahn Gillmor Sun, 19 Jun 2016 23:39:14 -0400