CVS commit: [pkgsrc-2008Q2] pkgsrc/security/ipsec-tools

["Tyler R. Retzlaff" <rtr%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   rtr
Date:           Tue Aug 19 00:26:04 UTC 2008

Modified Files:
        pkgsrc/security/ipsec-tools [pkgsrc-2008Q2]: Makefile distinfo

Log Message:
pullup ticket #2489 - requested by manu
ipsec-tools: update package for cve

revisions pulled up:
pkgsrc/security/ipsec-tools/Makefile    1.28
pkgsrc/security/ipsec-tools/distinfo    1.15

   Module Name:    pkgsrc
   Committed By:   manu
   Date:           Sat Aug 16 06:55:18 UTC 2008

   Modified Files:
           pkgsrc/doc: CHANGES-2008
           pkgsrc/security/ipsec-tools: Makefile distinfo

   Log Message:
   Update to ipsec-tools 0.7.1, fixes CVE-2008-3652

   Changes since the 0.6 branch:
   0.7.1 - 23 July 2008
           o Fixes a memory leak when invalid proposal received
           o Some fixes in DPD
           o do not set default gss id if xauth is used
           o fixed hybrid enabled builds
           o fixed compilation on FreeBSD8
           o cleanup in network port value manipulation
           o gets ports from SADB_X_EXT_NAT_T_[SD]PORT if present in
   purge_ipsec_sp
   i()
           o Generates a log if cert validation has been disabled by
   configuration
           o better handling for pfkey socket read errors
           o Fixes in yacc / bison stuff
           o new plog() macro (reduced CPU usage when logging is disabled)
           o Try to works better with huge SPD/SAD
           o Corrected modecfg option syntax
           o Many other various fixes...

   0.7     - 09 August 2007
           o Xauth with pre-shared key PSK
           o Xauth with certificates
           o SHA2 support
           o pkcs7 support
           o system accounting (utmp)
           o Darwin support
           o configuration can be reloaded
           o Support for UNIQUE generated policies
           o Support for semi anonymous sainfos
           o Support for ph1id to remoteid matching
           o Plain RSA authentication
           o Native LDAP support for Xauth and modecfg
           o Group membership checks for Xauth and sainfo selection
           o Camellia cipher support
           o IKE Fragment force option
           o Modecfg SplitNet attribute support
           o Modecfg SplitDNS attribute support ( server side )
           o Modecfg Default Domain attribute support
           o Modecfg DNS/WINS server multiple attribute support


To generate a diff of this commit:
cvs rdiff -r1.27 -r1.27.6.1 pkgsrc/security/ipsec-tools/Makefile
cvs rdiff -r1.14 -r1.14.12.1 pkgsrc/security/ipsec-tools/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.