-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2013-13605 2013-07-25 22:55:27 --------------------------------------------------------------------------------
Name : strongswan Product : Fedora 18 Version : 5.0.4 Release : 5.fc18 URL : http://www.strongswan.org/ Summary : An OpenSource IPsec-based VPN Solution Description : The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel. -------------------------------------------------------------------------------- Update Information: Rename strongswan-NetworkManager to strongswan-charon-nm. This is an update to the latest upstream release 5.0.4. Upstreamhave fixed many bugs, which can be seen in the upstream changelog: http://wiki.strongswan.org/projects/strongswan/wiki/Changelog50 . This update also addresses several packaging bugs. new upstream release. -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 25 2013 Jamie Nguyen <[email protected]> - 5.0.4-5 - rename strongswan-NetworkManager to strongswan-charon-nm - fix enable_nm macro * Mon Jul 15 2013 Jamie Nguyen <[email protected]> - 5.0.4-4 - %files tries to package some of the shared objects as directories (#984437) - fix broken systemd unit file (#984300) - fix rpmlint error: description-line-too-long - fix rpmlint error: macro-in-comment - fix rpmlint error: spelling-error Summary(en_US) fuctionality - depend on 'systemd' instead of 'systemd-units' - use new systemd scriptlet macros - NetworkManager subpackage should have a copy of the license (#984490) - enable hardened_build as this package meets the PIE criteria (#984429) - invocation of "ipsec _updown iptables" is broken as ipsec is renamed to strongswan in this package (#948306) - invocation of "ipsec scepclient" is broken as ipsec is renamed to strongswan in this package - add /etc/strongswan/ipsec.d and missing subdirectories - conditionalize building of strongswan-NetworkManager subpackage as the version of NetworkManager in EL6 is too old (#984497) * Fri Jun 28 2013 Avesh Agarwal <[email protected]> - 5.0.4-3 - Patch to fix a major crash issue when Freeradius loads attestatiom-imv and does not initialize libstrongswan which causes crash due to calls to PTS algorithms probing APIs. So this patch fixes the order of initialization. This issues does not occur with charon because libstrongswan gets initialized earlier. - Patch that allows to outputs errors when there are permission issues when accessing strongswan.conf. - Patch to make loading of modules configurable when libimcv is used in stand alone mode without charon with freeradius and wpa_supplicant. * Tue Jun 11 2013 Avesh Agarwal <[email protected]> - 5.0.4-2 - Enabled TNCCS 1.1 protocol - Fixed libxm2-devel build dependency - Patch to fix the issue with loading of plugins * Wed May 1 2013 Avesh Agarwal <[email protected]> - 5.0.4-1 - New upstream release - Fixes for CVE-2013-2944 - Enabled support for OS IMV/IMC - Created and applied a patch to disable ECP in fedora, because Openssl in Fedora does not allow ECP_256 and ECP_384. It makes it non-compliant to TCG's PTS standard, but there is no choice right now. see redhat bz # 319901. - Enabled Trousers support for TPM based operations. * Sat Apr 20 2013 Pavel Šimerda <[email protected]> - 5.0.3-2 - Rebuilt for a single specfile for rawhide/f19/f18/el6 * Fri Apr 19 2013 Avesh Agarwal <[email protected]> - 5.0.3-1 - New upstream release - Enabled curl and eap-identity plugins - Enabled support for eap-radius plugin. * Thu Apr 18 2013 Pavel Šimerda <[email protected]> - 5.0.2-3 - Add gettext-devel to BuildRequires because of epel6 - Remove unnecessary comments * Tue Mar 19 2013 Avesh Agarwal <[email protected]> - 5.0.2-2 - Enabled support for eap-radius plugin. * Mon Mar 11 2013 Avesh Agarwal <[email protected]> - 5.0.2-1 - Update to upstream release 5.0.2 - Created sub package strongswan-tnc-imcvs that provides trusted network connect's IMC and IMV funtionality. Specifically it includes PTS based IMC/IMV for TPM based remote attestation and scanner and test IMCs and IMVs. The Strongswan's IMC/IMV dynamic libraries can be used by any third party TNC Client/Server implementation possessing a standard IF-IMC/IMV interface. * Fri Feb 15 2013 Fedora Release Engineering <[email protected]> - 5.0.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Thu Oct 4 2012 Pavel Šimerda <[email protected]> - 5.0.1-1 - Update to release 5.0.1 * Thu Oct 4 2012 Pavel Šimerda <[email protected]> - 5.0.0-4.git20120619 - Add plugins to interoperate with Windows 7 and Android (#862472) (contributed by Haim Gelfenbeyn) -------------------------------------------------------------------------------- References: [ 1 ] Bug #984437 - %files tnc-imcvs section tries to package shared object files as directories https://bugzilla.redhat.com/show_bug.cgi?id=984437 [ 2 ] Bug #984300 - strongswan.service systemd unit file is broken https://bugzilla.redhat.com/show_bug.cgi?id=984300 [ 3 ] Bug #984490 - strongswan-NetworkManager subpackage should have a copy of COPYING https://bugzilla.redhat.com/show_bug.cgi?id=984490 [ 4 ] Bug #984429 - strongswan should have %global hardened_build 1 https://bugzilla.redhat.com/show_bug.cgi?id=984429 [ 5 ] Bug #948306 - Default updown script name https://bugzilla.redhat.com/show_bug.cgi?id=948306 [ 6 ] Bug #984497 - strongswan doesn't compile on el6 due to too old NM version (0.8.1) https://bugzilla.redhat.com/show_bug.cgi?id=984497 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update strongswan' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list [email protected] https://admin.fedoraproject.org/mailman/listinfo/package-announce
