-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Thu, 17 June 2004 12:22:45 +0200 Source: openswan Binary: openswan-modules-source kernel-patch-openswan openswan Architecture: source all i386 Version: 2.1.3-1 Distribution: unstable Urgency: high Maintainer: Rene Mayrhofer <rmayr@debian.org> Changed-By: Rene Mayrhofer <rene@mayrhofer.eu.org> Description: kernel-patch-openswan - IPSEC kernel support for Openswan openswan - IPSEC utilities for Openswan openswan-modules-source - IPSEC kernel modules source for Openswan Closes: 245450 246373 246847 253457 253458 253461 253782 Changes: openswan (2.1.3-1) unstable; urgency=HIGH . Urgency high because of a possibly security issue. * New upstream version. This includes the CRL fix form 2.1.1-5 and the proper activation of NAT traversal in Makefile.inc. Closes: #253457: Openswan: new upstream available that includes xauth Closes: #253458: Openswan: new upstream available that includes xauth Closes: #253461: Openswan: new upstream available Closes: #253782: openswan: Should automatically load kernel module xfrm_user But I have currently not explicitly enabled xaut support in Makefile.inc, quoting from there: "off by default, since XAUTH is tricky, and you can get into security trouble". If it needs to be enabled to work, please tell me and I will need to take a far closer look on it (and the involved problems). This new upstream version also fixes a possible security issue in the X.509 certificate authentication. * The last upload didn't seem to have hit the archives, strange... However, the bugs are still fixed, closing them now. Closes: #245450: openswan should not depend on kernel-image-2.4 || kernel-image-2.6 Closes: #246847: openswan: shouldn't conflict with ike-server Closes: #246373: openswan: [INTL:fr] French debconf templates translation Files: 869e119418794214ef15a157d5c7be26 711 net optional openswan_2.1.3-1.dsc ac65d15905e73ea6ce68f527f9a375ce 4541726 net optional openswan_2.1.3.orig.tar.gz f5c1deb67ff51a252b5f8f53476dd9c0 618137 net optional openswan_2.1.3-1.diff.gz c0d1e4be59428e4e1291be5c63d5c837 451054 net optional openswan-modules-source_2.1.3-1_all.deb 74a98887b3bd451874af515c4413c9b8 479948 net optional kernel-patch-openswan_2.1.3-1_all.deb daa7ae06ebf380b7d89256fa5d544d23 4813066 net optional openswan_2.1.3-1_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFA0peLq7SPDcPCS94RAkcFAJ429a/y0yiKBv0Pe+IVspxKBs/AOwCfWkeT GyFIwhU3n16ohXM0E9s1rpc= =z5/v -----END PGP SIGNATURE----- Accepted: kernel-patch-openswan_2.1.3-1_all.deb to pool/main/o/openswan/kernel-patch-openswan_2.1.3-1_all.deb openswan-modules-source_2.1.3-1_all.deb to pool/main/o/openswan/openswan-modules-source_2.1.3-1_all.deb openswan_2.1.3-1.diff.gz to pool/main/o/openswan/openswan_2.1.3-1.diff.gz openswan_2.1.3-1.dsc to pool/main/o/openswan/openswan_2.1.3-1.dsc openswan_2.1.3-1_i386.deb to pool/main/o/openswan/openswan_2.1.3-1_i386.deb openswan_2.1.3.orig.tar.gz to pool/main/o/openswan/openswan_2.1.3.orig.tar.gz -- To UNSUBSCRIBE, email to debian-devel-changes-REQUEST@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org