|
|
@ -3,54 +3,64 @@
|
|
|
|
%global with_efence 0
|
|
|
|
%global with_efence 0
|
|
|
|
%global with_development 0
|
|
|
|
%global with_development 0
|
|
|
|
%global with_cavstests 1
|
|
|
|
%global with_cavstests 1
|
|
|
|
%global nss_version 3.52
|
|
|
|
# minimum version for support for rhbz#1651314
|
|
|
|
|
|
|
|
# should prob update for nss with IKEv1 quick mode support
|
|
|
|
|
|
|
|
%global nss_version 3.53.1
|
|
|
|
%global unbound_version 1.6.6
|
|
|
|
%global unbound_version 1.6.6
|
|
|
|
# Libreswan config options
|
|
|
|
|
|
|
|
%global libreswan_config \\\
|
|
|
|
%global libreswan_config \\\
|
|
|
|
FINALLIBEXECDIR=%{_libexecdir}/ipsec \\\
|
|
|
|
FINALLIBEXECDIR=%{_libexecdir}/ipsec \\\
|
|
|
|
FINALMANDIR=%{_mandir} \\\
|
|
|
|
FINALMANDIR=%{_mandir} \\\
|
|
|
|
PREFIX=%{_prefix} \\\
|
|
|
|
FINALNSSDIR=%{_sysconfdir}/ipsec.d \\\
|
|
|
|
INITSYSTEM=systemd \\\
|
|
|
|
INITSYSTEM=systemd \\\
|
|
|
|
|
|
|
|
NSS_HAS_IPSEC_PROFILE=true \\\
|
|
|
|
|
|
|
|
NSS_REQ_AVA_COPY=false \\\
|
|
|
|
|
|
|
|
PREFIX=%{_prefix} \\\
|
|
|
|
PYTHON_BINARY=%{__python3} \\\
|
|
|
|
PYTHON_BINARY=%{__python3} \\\
|
|
|
|
SHELL_BINARY=%{_bindir}/sh \\\
|
|
|
|
SHELL_BINARY=%{_bindir}/sh \\\
|
|
|
|
USE_DNSSEC=true \\\
|
|
|
|
USE_DNSSEC=true \\\
|
|
|
|
|
|
|
|
USE_FIPSCHECK=false \\\
|
|
|
|
USE_LABELED_IPSEC=true \\\
|
|
|
|
USE_LABELED_IPSEC=true \\\
|
|
|
|
USE_LDAP=true \\\
|
|
|
|
USE_LDAP=true \\\
|
|
|
|
USE_LIBCAP_NG=true \\\
|
|
|
|
USE_LIBCAP_NG=true \\\
|
|
|
|
USE_LIBCURL=true \\\
|
|
|
|
USE_LIBCURL=true \\\
|
|
|
|
USE_LINUX_AUDIT=true \\\
|
|
|
|
USE_LINUX_AUDIT=true \\\
|
|
|
|
USE_NM=true \\\
|
|
|
|
USE_NM=true \\\
|
|
|
|
USE_NSS_IPSEC_PROFILE=true \\\
|
|
|
|
USE_NSS_KDF=true \\\
|
|
|
|
USE_SECCOMP=true \\\
|
|
|
|
USE_SECCOMP=true \\\
|
|
|
|
USE_AUTHPAM=true \\\
|
|
|
|
USE_AUTHPAM=true \\\
|
|
|
|
|
|
|
|
USE_DH2=true \\\
|
|
|
|
%{nil}
|
|
|
|
%{nil}
|
|
|
|
|
|
|
|
|
|
|
|
#global prever dr1
|
|
|
|
#global prever rc1
|
|
|
|
|
|
|
|
|
|
|
|
Name: libreswan
|
|
|
|
Name: libreswan
|
|
|
|
Summary: Internet Key Exchange (IKEv1 and IKEv2) implementation for IPsec
|
|
|
|
Summary: IPsec implementation with IKEv1 and IKEv2 keying protocols
|
|
|
|
# version is generated in the release script
|
|
|
|
# version is generated in the release script
|
|
|
|
Version: 4.12
|
|
|
|
Version: 4.12
|
|
|
|
Release: %{?prever:0.}2%{?prever:.%{prever}}%{?dist}.1
|
|
|
|
Release: %{?prever:0.}2%{?prever:.%{prever}}%{?dist}.4
|
|
|
|
License: GPLv2
|
|
|
|
License: GPLv2
|
|
|
|
Url: https://libreswan.org/
|
|
|
|
Url: https://libreswan.org/
|
|
|
|
Source0: https://download.libreswan.org/%{?prever:development/}%{name}-%{version}%{?prever}.tar.gz
|
|
|
|
|
|
|
|
|
|
|
|
Source0: https://download.libreswan.org/%{?prever:with_development/}%{name}-%{version}%{?prever}.tar.gz
|
|
|
|
%if 0%{with_cavstests}
|
|
|
|
%if 0%{with_cavstests}
|
|
|
|
Source1: https://download.libreswan.org/cavs/ikev1_dsa.fax.bz2
|
|
|
|
Source1: https://download.libreswan.org/cavs/ikev1_dsa.fax.bz2
|
|
|
|
Source2: https://download.libreswan.org/cavs/ikev1_psk.fax.bz2
|
|
|
|
Source2: https://download.libreswan.org/cavs/ikev1_psk.fax.bz2
|
|
|
|
Source3: https://download.libreswan.org/cavs/ikev2.fax.bz2
|
|
|
|
Source3: https://download.libreswan.org/cavs/ikev2.fax.bz2
|
|
|
|
%endif
|
|
|
|
%endif
|
|
|
|
Patch: libreswan-4.6-ikev1-policy-defaults-to-drop.patch
|
|
|
|
|
|
|
|
Patch: libreswan-4.12-ikev2-auth-delete-state.patch
|
|
|
|
Patch1: libreswan-4.3-maintain-different-v1v2-split.patch
|
|
|
|
Patch: libreswan-4.12-ipv6-san.patch
|
|
|
|
Patch2: libreswan-3.32-1861360-nodefault-rsa-pss.patch
|
|
|
|
Patch: libreswan-4.12-ikev1-compute-keymat-default.patch
|
|
|
|
Patch3: libreswan-4.1-maintain-obsolete-keywords.patch
|
|
|
|
|
|
|
|
Patch6: libreswan-4.3-1934186-config.patch
|
|
|
|
|
|
|
|
Patch7: libreswan-4.9-2176248-authby-rsasig.patch
|
|
|
|
|
|
|
|
Patch8: libreswan-4.12-ikev2-auth-delete-state.patch
|
|
|
|
|
|
|
|
Patch9: libreswan-4.12-ikev1-compute-keymat-default.patch
|
|
|
|
|
|
|
|
|
|
|
|
BuildRequires: audit-libs-devel
|
|
|
|
BuildRequires: audit-libs-devel
|
|
|
|
BuildRequires: bison
|
|
|
|
BuildRequires: bison
|
|
|
|
BuildRequires: curl-devel
|
|
|
|
BuildRequires: curl-devel
|
|
|
|
BuildRequires: flex
|
|
|
|
BuildRequires: flex
|
|
|
|
BuildRequires: gcc make
|
|
|
|
BuildRequires: gcc make
|
|
|
|
BuildRequires: hostname
|
|
|
|
|
|
|
|
BuildRequires: ldns-devel
|
|
|
|
BuildRequires: ldns-devel
|
|
|
|
BuildRequires: libcap-ng-devel
|
|
|
|
BuildRequires: libcap-ng-devel
|
|
|
|
BuildRequires: libevent-devel
|
|
|
|
BuildRequires: libevent-devel
|
|
|
@ -58,10 +68,12 @@ BuildRequires: libseccomp-devel
|
|
|
|
BuildRequires: libselinux-devel
|
|
|
|
BuildRequires: libselinux-devel
|
|
|
|
BuildRequires: nspr-devel
|
|
|
|
BuildRequires: nspr-devel
|
|
|
|
BuildRequires: nss-devel >= %{nss_version}
|
|
|
|
BuildRequires: nss-devel >= %{nss_version}
|
|
|
|
BuildRequires: nss-tools >= %{nss_version}
|
|
|
|
BuildRequires: nss-tools
|
|
|
|
BuildRequires: openldap-devel
|
|
|
|
BuildRequires: openldap-devel
|
|
|
|
BuildRequires: pam-devel
|
|
|
|
BuildRequires: pam-devel
|
|
|
|
BuildRequires: pkgconfig
|
|
|
|
BuildRequires: pkgconfig
|
|
|
|
|
|
|
|
BuildRequires: hostname
|
|
|
|
|
|
|
|
BuildRequires: redhat-rpm-config
|
|
|
|
BuildRequires: systemd-devel
|
|
|
|
BuildRequires: systemd-devel
|
|
|
|
BuildRequires: unbound-devel >= %{unbound_version}
|
|
|
|
BuildRequires: unbound-devel >= %{unbound_version}
|
|
|
|
BuildRequires: xmlto
|
|
|
|
BuildRequires: xmlto
|
|
|
@ -80,7 +92,7 @@ Requires(preun): systemd
|
|
|
|
Requires(postun): systemd
|
|
|
|
Requires(postun): systemd
|
|
|
|
|
|
|
|
|
|
|
|
%description
|
|
|
|
%description
|
|
|
|
Libreswan is a free implementation of IPsec & IKE for Linux. IPsec is
|
|
|
|
Libreswan is a free implementation of IKE/IPsec for Linux. IPsec is
|
|
|
|
the Internet Protocol Security and uses strong cryptography to provide
|
|
|
|
the Internet Protocol Security and uses strong cryptography to provide
|
|
|
|
both authentication and encryption services. These services allow you
|
|
|
|
both authentication and encryption services. These services allow you
|
|
|
|
to build secure tunnels through untrusted networks. Everything passing
|
|
|
|
to build secure tunnels through untrusted networks. Everything passing
|
|
|
@ -97,9 +109,19 @@ Libreswan is based on Openswan-2.6.38 which in turn is based on FreeS/WAN-2.04
|
|
|
|
|
|
|
|
|
|
|
|
%prep
|
|
|
|
%prep
|
|
|
|
%setup -q -n libreswan-%{version}%{?prever}
|
|
|
|
%setup -q -n libreswan-%{version}%{?prever}
|
|
|
|
|
|
|
|
%patch1 -p1
|
|
|
|
|
|
|
|
%patch2 -p1
|
|
|
|
|
|
|
|
%patch3 -p1
|
|
|
|
|
|
|
|
%patch6 -p1
|
|
|
|
|
|
|
|
%patch7 -p1
|
|
|
|
|
|
|
|
%patch8 -p1
|
|
|
|
|
|
|
|
%patch9 -p1
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# linking to freebl is not needed
|
|
|
|
|
|
|
|
sed -i "s/-lfreebl //" mk/config.mk
|
|
|
|
|
|
|
|
|
|
|
|
# enable crypto-policies support
|
|
|
|
# enable crypto-policies support
|
|
|
|
sed -i "s:#[ ]*include \(.*\)\(/crypto-policies/back-ends/libreswan.config\)$:include \1\2:" configs/ipsec.conf.in
|
|
|
|
sed -i "s:#[ ]*include \(.*\)\(/crypto-policies/back-ends/libreswan.config\)$:include \1\2:" configs/ipsec.conf.in
|
|
|
|
%autopatch -p1
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%build
|
|
|
|
%build
|
|
|
|
make %{?_smp_mflags} \
|
|
|
|
make %{?_smp_mflags} \
|
|
|
@ -108,21 +130,20 @@ make %{?_smp_mflags} \
|
|
|
|
%else
|
|
|
|
%else
|
|
|
|
OPTIMIZE_CFLAGS="%{optflags}" \
|
|
|
|
OPTIMIZE_CFLAGS="%{optflags}" \
|
|
|
|
%endif
|
|
|
|
%endif
|
|
|
|
WERROR_CFLAGS="-Werror -Wno-missing-field-initializers -Wno-lto-type-mismatch -Wno-maybe-uninitialized" \
|
|
|
|
|
|
|
|
%if 0%{with_efence}
|
|
|
|
%if 0%{with_efence}
|
|
|
|
USE_EFENCE=true \
|
|
|
|
USE_EFENCE=true \
|
|
|
|
%endif
|
|
|
|
%endif
|
|
|
|
USERLINK="%{?__global_ldflags} -Wl,-z,relro -Wl,--as-needed -Wl,-z,now -flto --no-lto" \
|
|
|
|
WERROR_CFLAGS="-Werror -Wno-missing-field-initializers" \
|
|
|
|
|
|
|
|
USERLINK="%{?__global_ldflags}" \
|
|
|
|
%{libreswan_config} \
|
|
|
|
%{libreswan_config} \
|
|
|
|
programs
|
|
|
|
programs
|
|
|
|
FS=$(pwd)
|
|
|
|
FS=$(pwd)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%install
|
|
|
|
%install
|
|
|
|
make \
|
|
|
|
make \
|
|
|
|
DESTDIR=%{buildroot} \
|
|
|
|
DESTDIR=%{buildroot} \
|
|
|
|
%{libreswan_config} \
|
|
|
|
%{libreswan_config} \
|
|
|
|
install
|
|
|
|
install
|
|
|
|
FS=$(pwd)
|
|
|
|
FS=$(pwd)
|
|
|
|
rm -rf %{buildroot}/usr/share/doc/libreswan
|
|
|
|
rm -rf %{buildroot}/usr/share/doc/libreswan
|
|
|
|
rm -rf %{buildroot}%{_libexecdir}/ipsec/*check
|
|
|
|
rm -rf %{buildroot}%{_libexecdir}/ipsec/*check
|
|
|
@ -132,10 +153,10 @@ install -d %{buildroot}%{_sbindir}
|
|
|
|
|
|
|
|
|
|
|
|
install -d %{buildroot}%{_sysconfdir}/sysctl.d
|
|
|
|
install -d %{buildroot}%{_sysconfdir}/sysctl.d
|
|
|
|
install -m 0644 packaging/fedora/libreswan-sysctl.conf \
|
|
|
|
install -m 0644 packaging/fedora/libreswan-sysctl.conf \
|
|
|
|
%{buildroot}%{_sysconfdir}/sysctl.d/50-libreswan.conf
|
|
|
|
%{buildroot}%{_sysconfdir}/sysctl.d/50-libreswan.conf
|
|
|
|
|
|
|
|
|
|
|
|
echo "include %{_sysconfdir}/ipsec.d/*.secrets" \
|
|
|
|
echo "include %{_sysconfdir}/ipsec.d/*.secrets" \
|
|
|
|
> %{buildroot}%{_sysconfdir}/ipsec.secrets
|
|
|
|
> %{buildroot}%{_sysconfdir}/ipsec.secrets
|
|
|
|
rm -fr %{buildroot}%{_sysconfdir}/rc.d/rc*
|
|
|
|
rm -fr %{buildroot}%{_sysconfdir}/rc.d/rc*
|
|
|
|
|
|
|
|
|
|
|
|
%if 0%{with_cavstests}
|
|
|
|
%if 0%{with_cavstests}
|
|
|
@ -156,7 +177,6 @@ bunzip2 *.fax.bz2
|
|
|
|
%{buildroot}%{_libexecdir}/ipsec/cavp -v1psk ikev1_psk.fax | \
|
|
|
|
%{buildroot}%{_libexecdir}/ipsec/cavp -v1psk ikev1_psk.fax | \
|
|
|
|
diff -u ikev1_psk.fax - > /dev/null
|
|
|
|
diff -u ikev1_psk.fax - > /dev/null
|
|
|
|
: CAVS tests passed
|
|
|
|
: CAVS tests passed
|
|
|
|
%endif
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# Some of these tests will show ERROR for negative testing - it will exit on real errors
|
|
|
|
# Some of these tests will show ERROR for negative testing - it will exit on real errors
|
|
|
|
%{buildroot}%{_libexecdir}/ipsec/algparse -tp || { echo prooposal test failed; exit 1; }
|
|
|
|
%{buildroot}%{_libexecdir}/ipsec/algparse -tp || { echo prooposal test failed; exit 1; }
|
|
|
@ -169,6 +189,8 @@ certutil -N -d sql:$tmpdir --empty-password
|
|
|
|
%{buildroot}%{_libexecdir}/ipsec/pluto --selftest --nssdir $tmpdir --rundir $tmpdir
|
|
|
|
%{buildroot}%{_libexecdir}/ipsec/pluto --selftest --nssdir $tmpdir --rundir $tmpdir
|
|
|
|
: pluto self-test passed - verify FIPS algorithms allowed is still compliant with NIST
|
|
|
|
: pluto self-test passed - verify FIPS algorithms allowed is still compliant with NIST
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%endif
|
|
|
|
|
|
|
|
|
|
|
|
%post
|
|
|
|
%post
|
|
|
|
%systemd_post ipsec.service
|
|
|
|
%systemd_post ipsec.service
|
|
|
|
|
|
|
|
|
|
|
@ -188,198 +210,175 @@ certutil -N -d sql:$tmpdir --empty-password
|
|
|
|
%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/ipsec.d/policies/*
|
|
|
|
%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/ipsec.d/policies/*
|
|
|
|
%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/sysctl.d/50-libreswan.conf
|
|
|
|
%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/sysctl.d/50-libreswan.conf
|
|
|
|
%attr(0755,root,root) %dir %{_rundir}/pluto
|
|
|
|
%attr(0755,root,root) %dir %{_rundir}/pluto
|
|
|
|
%attr(0700,root,root) %dir %{_sharedstatedir}/ipsec
|
|
|
|
|
|
|
|
%attr(0700,root,root) %dir %{_sharedstatedir}/ipsec/nss
|
|
|
|
|
|
|
|
%attr(0644,root,root) %{_tmpfilesdir}/libreswan.conf
|
|
|
|
%attr(0644,root,root) %{_tmpfilesdir}/libreswan.conf
|
|
|
|
%attr(0644,root,root) %{_unitdir}/ipsec.service
|
|
|
|
%attr(0644,root,root) %{_unitdir}/ipsec.service
|
|
|
|
%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/pam.d/pluto
|
|
|
|
%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/pam.d/pluto
|
|
|
|
%config(noreplace) %{_sysconfdir}/logrotate.d/libreswan
|
|
|
|
%config(noreplace) %{_sysconfdir}/logrotate.d/libreswan
|
|
|
|
%{_sbindir}/ipsec
|
|
|
|
%{_sbindir}/ipsec
|
|
|
|
%{_libexecdir}/ipsec
|
|
|
|
%{_libexecdir}/ipsec
|
|
|
|
%doc %{_mandir}/*/*
|
|
|
|
%attr(0644,root,root) %doc %{_mandir}/*/*
|
|
|
|
|
|
|
|
|
|
|
|
%changelog
|
|
|
|
%changelog
|
|
|
|
* Wed Jun 5 2024 Daiki Ueno <dueno@redhat.com> - 4.12-2.1
|
|
|
|
* Thu Jun 6 2024 Daiki Ueno <dueno@redhat.com> - 4.12-2.4
|
|
|
|
- Fix CVE-2024-3652 (RHEL-40102)
|
|
|
|
- Fix CVE-2024-3652 (RHEL-32482)
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Apr 11 2024 Daiki Ueno <dueno@redhat.com> - 4.12-2
|
|
|
|
|
|
|
|
- Fix CVE-2024-2357 (RHEL-32761)
|
|
|
|
|
|
|
|
- x509: unpack IPv6 general names based on length (RHEL-32718)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Wed Aug 9 2023 Daiki Ueno <dueno@redhat.com> - 4.12-1
|
|
|
|
|
|
|
|
- Update to 4.12 to fix CVE-2023-38710, CVE-2023-38711, CVE-2023-38712
|
|
|
|
|
|
|
|
- Resolves: rhbz#2215956
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Fri May 05 2023 Sahana Prasad <sahana@redhat.com> - 4.9-5
|
|
|
|
* Wed Apr 17 2024 Daiki Ueno <dueno@redhat.com> - 4.12-2.3
|
|
|
|
- Just bumping up the version to include bugs for CVE-2023-2295. There is no
|
|
|
|
- Bump release to ensure el8 package is greater than el8_* packages
|
|
|
|
code fix for it. Fix for it is including the code fix for CVE-2023-30570.
|
|
|
|
|
|
|
|
- Fix CVE-2023-2295 Regression of CVE-2023-30570 fixes in the
|
|
|
|
|
|
|
|
Red Hat Enterprise Linux
|
|
|
|
|
|
|
|
- Resolves: rhbz#2189777, rhbz#2190148
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Thu May 04 2023 Sahana Prasad <sahana@redhat.com> - 4.9-4
|
|
|
|
* Tue Apr 16 2024 Daiki Ueno <dueno@redhat.com> - 4.12-2.2
|
|
|
|
- Just bumping up the version as an incorrect 9.3 build was created.
|
|
|
|
- Fix patch application in the previous change
|
|
|
|
- Related: rhbz#2187171
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Thu May 04 2023 Sahana Prasad <sahana@redhat.com> - 4.9-3
|
|
|
|
* Mon Apr 15 2024 Daiki Ueno <dueno@redhat.com> - 4.12-2.1
|
|
|
|
- Fix CVE-2023-30570:Malicious IKEv1 Aggressive Mode packets can crash
|
|
|
|
- Fix CVE-2024-2357 (RHEL-28742)
|
|
|
|
libreswan
|
|
|
|
|
|
|
|
- Resolves: rhbz#2187171
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Tue Apr 4 2023 Daiki Ueno <dueno@redhat.com> - 4.9-2
|
|
|
|
* Fri Aug 25 2023 Daiki Ueno <dueno@redhat.com> - 4.12-2
|
|
|
|
- Fix CVE-2023-23009: remote DoS via crafted TS payload with an
|
|
|
|
- Resolves: rhbz#2234731 authby=rsasig fails in FIPS policy
|
|
|
|
incorrect selector length (rhbz#2173674)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Wed Jan 4 2023 Daiki Ueno <dueno@redhat.com> - 4.9-1
|
|
|
|
* Wed Aug 9 2023 Daiki Ueno <dueno@redhat.com> - 4.12-1
|
|
|
|
- Update to 4.9. Resolves: rhbz#2128669
|
|
|
|
- Update to 4.12 to fix CVE-2023-38710, CVE-2023-38711, CVE-2023-38712
|
|
|
|
- Switch to using %%autopatch as in Fedora
|
|
|
|
- Resolves: rhbz#2215955
|
|
|
|
|
|
|
|
|
|
|
|
* Wed Feb 2 2022 Daiki Ueno <dueno@redhat.com> - 4.6-3
|
|
|
|
|
|
|
|
- Drop IKEv1 packets by default, based on the Debian patch
|
|
|
|
|
|
|
|
by Daniel Kahn Gillmor (rhbz#2039877)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Jan 17 2022 Daiki Ueno <dueno@redhat.com> - 4.6-2
|
|
|
|
|
|
|
|
- Related: rhbz#2017355 rebuild to reflect gating.yaml change
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Jan 17 2022 Daiki Ueno <dueno@redhat.com> - 4.6-1
|
|
|
|
|
|
|
|
- Update to 4.6. Resolves: rhbz#2017355
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Jan 10 2022 Daiki Ueno <dueno@redhat.com> - 4.5-1
|
|
|
|
|
|
|
|
- Update to 4.5. Resolves: rhbz#2017355
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 4.4-3.1
|
|
|
|
|
|
|
|
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
|
|
|
|
|
|
|
|
Related: rhbz#1991688
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Wed Jul 21 2021 Daiki Ueno <dueno@redhat.com> - 4.4-3
|
|
|
|
|
|
|
|
- Backport removal gethostbyname2 uses from the upstream
|
|
|
|
|
|
|
|
- Fix issues spotted by covscan (rhbz#1938784)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Tue Jul 13 2021 Daiki Ueno <dueno@redhat.com> - 4.4-2
|
|
|
|
|
|
|
|
- Rebuild with newer GCC to fix annocheck failures
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Jul 1 2021 Daiki Ueno <dueno@redhat.com> - 4.4-1
|
|
|
|
* Thu May 04 2023 Sahana Prasad <sahana@redhat.com> - 4.9-2
|
|
|
|
- Update to 4.4. Resolves: rhbz#1975812
|
|
|
|
- Fix CVE-2023-30570 Malicious IKEv1 Aggressive Mode packets can crash libreswan
|
|
|
|
- Port compiler warning suppression by Paul Wouters:
|
|
|
|
- Resolves: rhbz#2187179
|
|
|
|
https://src.fedoraproject.org/rpms/libreswan/c/8d7f98d41444ac77c562f735b4b93038f5346ce2?branch=rawhide
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Jun 24 2021 Daiki Ueno <dueno@redhat.com> - 4.2-1.3
|
|
|
|
* Mon Jan 9 2023 Daiki Ueno <dueno@redhat.com> - 4.9-1
|
|
|
|
- Fix FTBFS with OpenSSL 3.0 (rhbz#1975439)
|
|
|
|
- Resolves: rhbz#2128672 Rebase libreswan to 4.9
|
|
|
|
|
|
|
|
- Remove libreswan-4.4-ikev1-disable-diagnostics.patch no longer necessary
|
|
|
|
|
|
|
|
|
|
|
|
* Tue Jun 22 2021 Mohan Boddu <mboddu@redhat.com> - 4.2-1.2
|
|
|
|
* Thu Jan 13 2022 Daiki Ueno <dueno@redhat.com> - 4.5-1
|
|
|
|
- Rebuilt for RHEL 9 BETA for openssl 3.0
|
|
|
|
- Resolves: rhbz#2017352 Rebase libreswan to 4.5
|
|
|
|
Related: rhbz#1971065
|
|
|
|
- Resolves: rhbz#2036903 ikev1: disable diagnostics logging on receiving malformed packets
|
|
|
|
|
|
|
|
|
|
|
|
* Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 4.2-1.1
|
|
|
|
* Wed May 26 2021 Daiki Ueno <dueno@redhat.com> - 4.4-1
|
|
|
|
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
|
|
|
|
- Resolves: rhbz#1958968 Rebase libreswan to 4.4
|
|
|
|
|
|
|
|
- Resolves: rhbz#1954423 Libreswan: TS_UNACCEPTABLE on multiple connections between the same peers
|
|
|
|
|
|
|
|
|
|
|
|
* Wed Feb 03 2021 Paul Wouters <pwouters@redhat.com> - 4.2-1
|
|
|
|
* Thu Mar 04 2021 Paul Wouters <pwouters@redhat.com> - 4.3-3
|
|
|
|
- Update to 4.2
|
|
|
|
- Resolves: rhbz#1933064 - IKEv2 support for Labeled IPsec
|
|
|
|
|
|
|
|
- Resolves: rhbz#1935150 RFE: Support IKE and ESP over TCP: RFC 8229
|
|
|
|
|
|
|
|
- Resolves: rhbz#1935339 virtual_private setting is missing in the default config
|
|
|
|
|
|
|
|
|
|
|
|
* Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 4.2-0.1.rc1.1
|
|
|
|
* Sun Feb 21 2021 Paul Wouters <pwouters@redhat.com> - 4.3-1
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
|
|
|
|
- Resolves: rhbz#1025061 - IKEv2 support for Labeled IPsec [update]
|
|
|
|
|
|
|
|
|
|
|
|
* Sat Dec 19 19:59:55 EST 2020 Paul Wouters <pwouters@redhat.com> - 4.2-0.1.rc1
|
|
|
|
* Thu Feb 04 2021 Paul Wouters <pwouters@redhat.com> - 4.2-1
|
|
|
|
- Resolves: rhbz#1867580 pluto process frequently dumps core
|
|
|
|
- Resolves: rhbz#1891128 [Rebase] rebase libreswan to 4.2
|
|
|
|
(disable USE_NSS_KDF until nss fixes have propagated)
|
|
|
|
- Resolves: rhbz#1025061 - IKEv2 support for Labeled IPsec
|
|
|
|
|
|
|
|
|
|
|
|
* Sat Dec 19 2020 Adam Williamson <awilliam@redhat.com> - 4.1-4
|
|
|
|
* Tue Oct 27 22:11:42 EDT 2020 Paul Wouters <pwouters@redhat.com> - 4.1-1
|
|
|
|
- Rebuild for ldns soname bump
|
|
|
|
- Resolves: rhbz#1891128 [Rebase] rebase libreswan to 4.1
|
|
|
|
|
|
|
|
- Resolves: rhbz#1889836 libreswan: add 3.x compat patches for obsoleted/removed keywords of 4.0 and re-port ikev2= patch
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Nov 23 11:50:41 EST 2020 Paul Wouters <pwouters@redhat.com> - 4.1-3
|
|
|
|
* Wed Jul 29 2020 Paul Wouters <pwouters@redhat.com> - 3.32-6
|
|
|
|
- Resolves: rhbz#1894381 Libreswan 4.1-2 breaks l2tp connection to Windows VPN server
|
|
|
|
- Resolves: rhbz#1861360 authby=rsasig must not imply usage of rsa-pss
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Oct 26 10:21:57 EDT 2020 Paul Wouters <pwouters@redhat.com> - 4.1-2
|
|
|
|
* Wed Jul 22 2020 Paul Wouters <pwouters@redhat.com> - 3.32-5
|
|
|
|
- Resolves: rhbz#1889538 libreswan's /var/lib/ipsec/nss missing
|
|
|
|
- Resolves: rhbz#1820206 Rebase to libreswan 3.32 [rebuild for USE_NSS_PRF]
|
|
|
|
|
|
|
|
|
|
|
|
* Sun Oct 18 21:49:39 EDT 2020 Paul Wouters <pwouters@redhat.com> - 4.1-1
|
|
|
|
* Wed Jul 01 2020 Paul Wouters <pwouters@redhat.com> - 3.32-4
|
|
|
|
- Updated to 4.1 - interop fix for Cisco
|
|
|
|
- Resolves: rhbz#1544463 ipsec service does not work correctly when seccomp filtering is enabled
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Oct 15 10:27:14 EDT 2020 Paul Wouters <pwouters@redhat.com> - 4.0-1
|
|
|
|
* Wed Jun 17 2020 Paul Wouters <pwouters@redhat.com> - 3.32-3
|
|
|
|
- Resolves: rhbz#1888448 libreswan-4.0 is available
|
|
|
|
- Resolves: rhbz#1842597 regression: libreswan does not send PLUTO_BYTES env variables to updown script
|
|
|
|
|
|
|
|
- Resolves: rhbz#1847766 subsequent xfrmi interfaces configured outside of libreswan are not recognised properly
|
|
|
|
|
|
|
|
- Resolves: rhbz#1840212 protect libreswan against unannounced nss ABI change
|
|
|
|
|
|
|
|
|
|
|
|
* Wed Sep 30 14:05:58 EDT 2020 Paul Wouters <pwouters@redhat.com> - 4.0-0.2.rc1
|
|
|
|
* Thu Jun 11 2020 Paul Wouters <pwouters@redhat.com> - 3.32-2
|
|
|
|
- Rebuild for libevent 2.1.12 with a soname bump
|
|
|
|
- Resolves: rhbz#1820206 Rebase to libreswan 3.32 [addconn fix]
|
|
|
|
|
|
|
|
|
|
|
|
* Sun Sep 27 22:49:40 EDT 2020 Paul Wouters <pwouters@redhat.com> - 4.0-0.1.rc1
|
|
|
|
* Thu Apr 30 2020 Paul Wouters <pwouters@redhat.com> - 3.32-1
|
|
|
|
- Updated to 4.0rc1
|
|
|
|
- Resolves: rhbz#1820206 Rebase to libreswan 3.32
|
|
|
|
|
|
|
|
- Resolves: rhbz#1816265 Use NSS to check whether FIPS mode is enabled
|
|
|
|
|
|
|
|
- Resolves: rhbz#1826337 libreswan in FIPS mode rejects ECDSA keys based on faulty RSA key size check being applied
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Aug 27 2020 Paul Wouters <pwouters@redhat.com> - 3.32-4
|
|
|
|
* Tue Aug 13 2019 Paul Wouters <pwouters@redhat.com> - 3.29-6
|
|
|
|
- Resolves: rhbz#1864043 libreswan: FTBFS in Fedora rawhide/f33
|
|
|
|
- Resolves: rhbz#1714331 support NSS based IKE KDF's [require updated nss for rhbz 1738689, memleak fix]
|
|
|
|
|
|
|
|
|
|
|
|
* Sat Aug 01 2020 Fedora Release Engineering <releng@fedoraproject.org> - 3.32-3.2
|
|
|
|
* Thu Aug 08 2019 Paul Wouters <pwouters@redhat.com> - 3.29-5
|
|
|
|
- Second attempt - Rebuilt for
|
|
|
|
- Resolves: rhbz#1714331 support NSS based IKE KDF's so libreswan does not need FIPS certification
|
|
|
|
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Tue Jul 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 3.32-3.1
|
|
|
|
* Thu Aug 01 2019 Paul Wouters <pwouters@redhat.com> - 3.29-4
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
|
|
|
|
- Resolves: rhbz#1699318 'ipsec show' has python3 invalid syntax
|
|
|
|
|
|
|
|
|
|
|
|
* Tue Jun 30 2020 Jeff Law <law@redhat.com> - 3.32-3
|
|
|
|
* Thu Jul 04 2019 Paul Wouters <pwouters@redhat.com> - 3.29-3
|
|
|
|
- Initialize ppk_id_p in ikev2_parent_inR1outI2_tail to avoid uninitialized
|
|
|
|
- Resolves: rhbz#1725205 XFRM policy for OE/32 peer is deleted when shunts for previous half-open state expire
|
|
|
|
object
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Tue May 26 2020 Paul Wouters <pwouters@redhat.com> - 3.32-2
|
|
|
|
* Thu Jun 27 2019 Paul Wouters <pwouters@redhat.com> - 3.29-2
|
|
|
|
- Backport NSS guarding fix for unannounced changed api in NSS causing segfault
|
|
|
|
- Resolves: rhbz#1723957 libreswan is missing linux audit calls for failed IKE SAs and failed IPsec SAs required for Common Criteria
|
|
|
|
|
|
|
|
|
|
|
|
* Mon May 11 2020 Paul Wouters <pwouters@redhat.com> - 3.32-1
|
|
|
|
* Mon Jun 10 2019 Paul Wouters <pwouters@redhat.com> - 3.29-1
|
|
|
|
- Resolves: rhbz#1809770 libreswan-3.32 is available
|
|
|
|
- Resolves: rhbz#1712555 libreswan rebase to 3.29
|
|
|
|
|
|
|
|
|
|
|
|
* Tue Apr 14 2020 Paul Wouters <pwouters@redhat.com> - 3.31-2
|
|
|
|
* Tue May 28 2019 Paul Wouters <pwouters@redhat.com> - 3.28-2
|
|
|
|
- Resolves: rhbz#1823823 Please drop the dependency on fipscheck
|
|
|
|
- Resolves: rhbz#1713734: barf: shell syntax error in barf diagnostic tool
|
|
|
|
|
|
|
|
|
|
|
|
* Tue Mar 03 2020 Paul Wouters <pwouters@redhat.com> - 3.31-1
|
|
|
|
* Tue May 21 2019 Paul Wouters <pwouters@redhat.com> - 3.28-1
|
|
|
|
- Resolves: rhbz#1809770 libreswan-3.31 is available (fixes rekey regression)
|
|
|
|
- Resolves: rhbz#1712555 libreswan rebase to 3.28
|
|
|
|
|
|
|
|
- Resolves: rhbz#1683706 Libreswan shows incorrect error messages
|
|
|
|
|
|
|
|
- Resolves: rhbz#1706180 Remove last usage of old (unused) PF_KEY API
|
|
|
|
|
|
|
|
- Resolves: rhbz#1677045 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart
|
|
|
|
|
|
|
|
- Resolves: rhbz#1686990 IKEv1 traffic interruption when responder deletes SAs 60 seconds before EVENT_SA_REPLACE
|
|
|
|
|
|
|
|
- Resolves: rhbz#1608353 /usr/sbin/ipsec part of the libreswan packages still invokes commands that were deprecated a decade ago
|
|
|
|
|
|
|
|
- Resolves: rhbz#1699318 'ipsec show' has python3 invalid syntax
|
|
|
|
|
|
|
|
- Resolves: rhbz#1679394 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure
|
|
|
|
|
|
|
|
|
|
|
|
* Fri Feb 14 2020 Paul Wouters <pwouters@redhat.com> - 3.30-1
|
|
|
|
* Thu Feb 21 2019 Paul Wouters <pwouters@redhat.com> - 3.27-9
|
|
|
|
- Resolves: rhbz#1802896 libreswan-3.30 is available
|
|
|
|
- Resolves: rhbz#1648776 limit connections to be ikev1only or ikev2only and make ikev2only the default [man page update]
|
|
|
|
- Resolves: rhbz#1799598 libreswan: FTBFS in Fedora rawhide/f32
|
|
|
|
|
|
|
|
- Resolves: rhbz#1760571 [abrt] libreswan: configsetupcheck(): verify:366:configsetupcheck:TypeError:
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Wed Jan 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 3.29-2.1
|
|
|
|
* Fri Feb 15 2019 Paul Wouters <pwouters@redhat.com> - 3.27-8
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
|
|
|
|
- Resolves: rhbz#1664101 system wide crypto policies causing IKE_INIT packet fragmentation
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Jan 09 2020 Paul Wouters <pwouters@redhat.com> - 3.29-2
|
|
|
|
* Tue Feb 05 2019 Paul Wouters <pwouters@redhat.com> - 3.27-7
|
|
|
|
- _updown.netkey: fix syntax error in checking routes
|
|
|
|
- Resolves: rhbz#1671793 proessing ISAKMP_NEXT_D with additional payloads causes dangling pointer to deleted state
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Jul 25 2019 Fedora Release Engineering <releng@fedoraproject.org> - 3.29-1.1
|
|
|
|
* Fri Feb 01 2019 Paul Wouters <pwouters@redhat.com> - 3.27-6
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
|
|
|
|
- Resolves: rhbz#1668342 SELinux prevents libreswan from using some outbound ports causing DNS resolution failures at connection at load time
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Jun 10 2019 Paul Wouters <pwouters@redhat.com> - 3.29-1
|
|
|
|
* Thu Jan 10 2019 Paul Wouters <pwouters@redhat.com> - 3.27-5
|
|
|
|
- Resolves: rhbz#1718986 Updated to 3.29 for CVE-2019-10155
|
|
|
|
- Resolves: rhbz#1664522 libreswan 3.25 in FIPS mode is incorrectly rejecting X.509 public keys that are >= 3072 bits
|
|
|
|
|
|
|
|
|
|
|
|
* Tue May 21 2019 Paul Wouters <pwouters@redhat.com> - 3.28-1
|
|
|
|
* Mon Dec 10 2018 Paul Wouters <pwouters@redhat.com> - 3.27-4
|
|
|
|
- Updated to 3.28 (many imported bugfixes, including CVE-2019-12312)
|
|
|
|
- Resolves: rhbz#1657846 libreswan no longer needs to provide openswan in rhel8
|
|
|
|
|
|
|
|
- Resolves: rhbz#1643388 libreswan: Unable to verify certificate with non-empty Extended Key Usage which does not include serverAuth or clientAuth
|
|
|
|
|
|
|
|
- Resolves: rhbz#1657854 remove userland support for deprecated KLIPS IPsec stack support
|
|
|
|
|
|
|
|
|
|
|
|
* Fri Feb 01 2019 Fedora Release Engineering <releng@fedoraproject.org> - 3.27-1.2
|
|
|
|
* Sun Dec 09 2018 Paul Wouters <pwouters@redhat.com> - 3.27-3
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
|
|
|
|
- Resolves: rhbz#1648776 limit connections to be ikev1only or ikev2only and make ikev2only the default
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Jan 14 2019 Björn Esser <besser82@fedoraproject.org> - 3.27-1.1
|
|
|
|
* Thu Nov 08 2018 Paul Wouters <pwouters@redhat.com> - 3.27-2
|
|
|
|
- Rebuilt for libcrypt.so.2 (#1666033)
|
|
|
|
- Resolves: rhbz#1645137 Libreswan segfaults when it loads configuration file with more then 5 connections
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Oct 08 2018 Paul Wouters <pwouters@redhat.com> - 3.27-1
|
|
|
|
* Mon Oct 08 2018 Paul Wouters <pwouters@redhat.com> - 3.27-1
|
|
|
|
- Updated to 3.27 (various bugfixes)
|
|
|
|
- Resolves: rhbz#1566574 Rebase to libreswan 3.27
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Sep 27 2018 Paul Wouters <pwouters@redhat.com> - 3.26-3
|
|
|
|
|
|
|
|
- Add fedora python fixup for _unbound-hook
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Sep 17 2018 Paul Wouters <pwouters@redhat.com> - 3.26-2
|
|
|
|
|
|
|
|
- linking against freebl is no longer needed (and wasn't done in 3.25)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Sep 17 2018 Paul Wouters <pwouters@redhat.com> - 3.26-1
|
|
|
|
* Mon Sep 17 2018 Paul Wouters <pwouters@redhat.com> - 3.26-1
|
|
|
|
- Updated to 3.26 (CHACHA20POLY1305, ECDSA and RSA-PSS support)
|
|
|
|
- Resolves: rhbz#1566574 Rebase to libreswan 3.26
|
|
|
|
|
|
|
|
- Resolves: rhbz#1527037 libreswan IPSEC implementation: should follow the policies of system-wide crypto policy
|
|
|
|
|
|
|
|
- Resolves: rhbz#1375779 [IKEv2 Conformance] Test IKEv2.EN.R.1.1.6.7: Sending INVALID_KE_PAYLOAD failed
|
|
|
|
|
|
|
|
- Resolves: rhbz#1085758 [TAHI][IKEv2] IKEv2.EN.I.1.2.1.1: Can't observe CREATE_CHILD_SA request for rekey
|
|
|
|
|
|
|
|
- Resolves: rhbz#1053048 [TAHI][IKEv2] IKEv2.EN.I.1.2.4.1-7: libreswan doesn't sent CREATE_CHILD_SA after IKE_SA Lifetime timeout
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Aug 13 2018 Paul Wouters <pwouters@redhat.com> - 3.25-4
|
|
|
|
|
|
|
|
- Resolves: rhbz#1590823 libreswan: Use Python 3 in RHEL 8
|
|
|
|
|
|
|
|
|
|
|
|
* Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 3.25-3.1
|
|
|
|
* Wed Aug 01 2018 Charalampos Stratakis <cstratak@redhat.com> - 3.25-3.1
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
|
|
|
|
- Rebuild for platform-python
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Jul 09 2018 Paul Wouters <pwouters@redhat.com> - 3.25-3
|
|
|
|
* Mon Jul 09 2018 Paul Wouters <pwouters@redhat.com> - 3.25-3
|
|
|
|
- Fix Opportunistic IPsec _unbound-hook argument parsing
|
|
|
|
- Cleanup shebangs for python3
|
|
|
|
- Make rundir readable for all (so we can hand out permissions later)
|
|
|
|
- Use the same options via macro for make programs and make install
|
|
|
|
|
|
|
|
- Remove old ifdefs
|
|
|
|
|
|
|
|
- Sync up patches to new upstream version
|
|
|
|
|
|
|
|
- Add Requires: for unbound-libs >= 1.6.6
|
|
|
|
|
|
|
|
- Enable crypto-policies support
|
|
|
|
|
|
|
|
- Make rundir world readable for easier permission granting for socket
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Jul 02 2018 Paul Wouters <pwouters@redhat.com> - 3.25-2
|
|
|
|
* Tue Jun 26 2018 Charalampos Stratakis <cstratak@redhat.com> - 3.23-2.2
|
|
|
|
- Relax deleting IKE SA's and IPsec SA's to avoid interop issues with third party VPN vendors
|
|
|
|
- Make python shebangs point to python3
|
|
|
|
|
|
|
|
|
|
|
|
* Wed Jun 27 2018 Paul Wouters <pwouters@redhat.com> - 3.25-1
|
|
|
|
* Fri Jun 22 2018 Troy Dawson <tdawson@redhat.com> - 3.23-2.1
|
|
|
|
- Updated to 3.25
|
|
|
|
- Fix python shebangs (#1580773)
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Feb 19 2018 Paul Wouters <pwouters@redhat.com> - 3.23-2
|
|
|
|
* Mon Feb 19 2018 Paul Wouters <pwouters@redhat.com> - 3.23-2
|
|
|
|
- Support crypto-policies package
|
|
|
|
- Support crypto-policies package
|
|
|
@ -433,7 +432,7 @@ certutil -N -d sql:$tmpdir --empty-password
|
|
|
|
- Remove support for /etc/sysconfig/pluto (use native systemd instead)
|
|
|
|
- Remove support for /etc/sysconfig/pluto (use native systemd instead)
|
|
|
|
|
|
|
|
|
|
|
|
* Thu May 05 2016 Paul Wouters <pwouters@redhat.com> - 3.17-2
|
|
|
|
* Thu May 05 2016 Paul Wouters <pwouters@redhat.com> - 3.17-2
|
|
|
|
- Resolves: rhbz#1324956 prelink is gone, /etc/prelink.conf.d/* is no longer used
|
|
|
|
- Resolves: rhbz#1324956 prelink is gone, /etc/prelink.conf.d/* is no longer used
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Apr 07 2016 Paul Wouters <pwouters@redhat.com> - 3.17-1
|
|
|
|
* Thu Apr 07 2016 Paul Wouters <pwouters@redhat.com> - 3.17-1
|
|
|
|
- Updated to 3.17 for CVE-2016-3071
|
|
|
|
- Updated to 3.17 for CVE-2016-3071
|
|
|
|