Change log for libreswan package in Ubuntu

libreswan (4.11-1ubuntu1) mantic; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - d/tests/control: make opportunistic and cavp skippable if builder
      doesn't have access to internet.
    - d/tests/opportunistic: if ping or wget fails then exit 77 to skip
      the test.
    - d/tests/cavp: if wget fails then exit 77 to skip the test.

Available diffs

• diff from 4.10-2ubuntu1 to 4.11-1ubuntu1 (5.2 KiB)

libreswan (4.10-2ubuntu1) mantic; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - d/tests/control: make opportunistic and cavp skippable if builder
      doesn't have access to internet.
    - d/tests/opportunistic: if ping or wget fails then exit 77 to skip
      the test.
    - d/tests/cavp: if wget fails then exit 77 to skip the test.

Available diffs

• diff from 4.9-1ubuntu1 to 4.10-2ubuntu1 (6.2 KiB)

libreswan (4.9-1ubuntu1) lunar; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - d/tests/control: make opportunistic and cavp skippable if builder
      doesn't have access to internet.
    - d/tests/opportunistic: if ping or wget fails then exit 77 to skip
      the test.
    - d/tests/cavp: if wget fails then exit 77 to skip the test.

Available diffs

• diff from 4.7-1ubuntu2 to 4.9-1ubuntu1 (644.6 KiB)

libreswan (4.7-1ubuntu2) lunar; urgency=medium

  * No-change rebuild against libldap-2

 -- Steve Langasek <email address hidden>  Thu, 15 Dec 2022 19:50:52 +0000

Available diffs

• diff from 4.7-1ubuntu1 to 4.7-1ubuntu2 (330 bytes)

libreswan (4.7-1ubuntu1) kinetic; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - d/tests/control: make opportunistic and cavp skippable if builder
      doesn't have access to internet.
    - d/tests/opportunistic: if ping or wget fails then exit 77 to skip
      the test.
    - d/tests/cavp: if wget fails then exit 77 to skip the test.
  * Dropped changes, superseded upstream:
    - d/patches/fix-libselinux3.1-deprecated.patch: this fixes current
      ftbfs with libselinux3.1.
    - d/patches/fix-ftbfs-s390x.patch: fix maybe-uninitialized
      warning/error.

Available diffs

• diff from 3.32-3ubuntu3 to 4.7-1ubuntu1 (3.8 MiB)
• diff from 3.32-3ubuntu4 to 4.7-1ubuntu1 (3.8 MiB)

libreswan (3.32-3ubuntu4) kinetic; urgency=medium

  * No-change rebuild against libevent-2.1-7a (LP: #1990941)

 -- Benjamin Drung <email address hidden>  Fri, 07 Oct 2022 19:53:14 +0200

Available diffs

• diff from 3.32-3ubuntu3 to 3.32-3ubuntu4 (343 bytes)

libreswan (3.32-3ubuntu3) impish; urgency=medium

  * No-change rebuild due to OpenLDAP soname bump.

 -- Sergio Durigan Junior <email address hidden>  Mon, 21 Jun 2021 17:53:28 -0400

Available diffs

• diff from 3.32-3ubuntu2 to 3.32-3ubuntu3 (367 bytes)

libreswan (3.32-3ubuntu2) groovy; urgency=medium

  * d/tests/opportunistic and d/tests/cavp: fix how it exit 77 to skip
    the test in case of ping, wget, dig failures.

 -- Eduardo Barretto <email address hidden>  Mon, 24 Aug 2020 16:37:54 -0300

Available diffs

• diff from 3.32-3build1 to 3.32-3ubuntu2 (2.7 KiB)
• diff from 3.32-3ubuntu1 to 3.32-3ubuntu2 (1.0 KiB)

libreswan (3.32-3ubuntu1) groovy; urgency=medium

  * d/tests/control: make opportunistic and cavp skippable if builder
    doesn't have access to internet.
  * d/tests/opportunistic: if ping or wget fails then exit 77 to skip
    the test.
  * d/tests/cavp: if wget fails then exit 77 to skip the test.
  * d/patches/fix-libselinux3.1-deprecated.patch: this fixes current
    ftbfs with libselinux3.1.
  * d/patches/fix-ftbfs-s390x.patch: fix maybe-uninitialized
    warning/error.

 -- Eduardo Barretto <email address hidden>  Fri, 21 Aug 2020 12:00:11 -0300

Available diffs

• diff from 3.32-3build1 to 3.32-3ubuntu1 (2.5 KiB)

libreswan (3.32-3build1) groovy; urgency=medium

  * No-change rebuild against libldns3.

 -- Logan Rosen <email address hidden>  Tue, 30 Jun 2020 19:40:37 -0400

Available diffs

• diff from 3.32-3 (in Debian) to 3.32-3build1 (310 bytes)

libreswan (3.32-3) unstable; urgency=medium

  * allow stderr on CAVP tests

 -- Daniel Kahn Gillmor <email address hidden>  Thu, 28 May 2020 08:13:57 -0400

Available diffs

• diff from 3.32-2 to 3.32-3 (417 bytes)

libreswan (3.32-2) unstable; urgency=medium

  * streamline autopkgtests

 -- Daniel Kahn Gillmor <email address hidden>  Tue, 26 May 2020 16:55:21 -0400

Available diffs

• diff from 3.29-2build1 (in Ubuntu) to 3.32-2 (1.3 MiB)
• diff from 3.32-1 to 3.32-2 (600 bytes)

libreswan (3.32-1) unstable; urgency=medium

  [ Stephen Kitt ]
  * Remove the systemd dependency (Closes: #931858)

  [ Daniel Kahn Gillmor ]
  * New upstream version, fixing CVE-2020-1763 (Closes: #960458)
  * refresh patches, dropping those already applied upstream
  * Standards-Version: bump to 4.5.0 (no changes needed)
  * move to dh 13
  * drop unneeded lintian-override
  * d/copyright: drop annotations for removed source
  * move subcommand executables from /usr/lib/ipsec to /usr/libexec/ipsec
  * fix upstream spelling errors
  * added buildtime and runtime checks that the crypto works as expected
  * include upstream patch to address subtle NSS API variance
  * autopkgtest: add CAVP/ACVP tests
  * use dh_auto_build instead of $(MAKE) when building
  * enable cross-building (Closes: #958355)
  * d/tests/opportunistic: avoid dropping into a pager if run from a
    terminal

 -- Daniel Kahn Gillmor <email address hidden>  Fri, 22 May 2020 18:33:46 -0400

libreswan (3.29-2build1) focal; urgency=medium

  * No-change rebuild for libevent soname changes.

 -- Matthias Klose <email address hidden>  Sat, 19 Oct 2019 19:55:54 +0000

Available diffs

• diff from 3.29-2 (in Debian) to 3.29-2build1 (303 bytes)

libreswan (3.29-2) unstable; urgency=medium

  * Release to unstable
  * fix up more upstream orthography
  * standards-version: bump to 4.4.0 (no changes needed
  * change lintian override of spelling-error-in-copyright to match new
    reporting

 -- Daniel Kahn Gillmor <email address hidden>  Mon, 19 Aug 2019 18:57:33 -0400

Available diffs

• diff from 3.27-6 to 3.29-2 (1.0 MiB)

libreswan (3.27-6) unstable; urgency=medium

  * fix CVE-2019-10155 (closes: #930338)

 -- Daniel Kahn Gillmor <email address hidden>  Mon, 10 Jun 2019 23:04:05 +0100

Available diffs

• diff from 3.27-5 to 3.27-6 (3.3 KiB)

libreswan (3.27-5) unstable; urgency=medium

  * fix CVE-2019-12312 (Closes: #929916)
  * bump Standards-Version to 4.3.0 (no changes needed)

 -- Daniel Kahn Gillmor <email address hidden>  Mon, 03 Jun 2019 19:36:16 -0400

Available diffs

• diff from 3.27-4 to 3.27-5 (1.3 KiB)

libreswan (3.27-4) unstable; urgency=medium

  * order object files for reproducible linking

 -- Daniel Kahn Gillmor <email address hidden>  Tue, 16 Oct 2018 10:27:14 -0400

Available diffs

• diff from 3.25-1 to 3.27-4 (998.5 KiB)

libreswan (3.25-1) unstable; urgency=medium

  * new upstream release
  * refresh patches

 -- Daniel Kahn Gillmor <email address hidden>  Wed, 27 Jun 2018 12:46:44 -0400

Available diffs

• diff from 3.23-6 to 3.25-1 (800.0 KiB)

libreswan (3.23-6) unstable; urgency=medium

  * avoid -fstack-protector-all on ia64

 -- Daniel Kahn Gillmor <email address hidden>  Tue, 19 Jun 2018 22:39:57 -0400

Available diffs

• diff from 3.23-5 to 3.23-6 (541 bytes)

libreswan (3.23-5) unstable; urgency=medium

  * move to DEP-14 branch naming
  * Standards-Version: bump to 4.1.4 (no changes needed)
  * d/rules: drop unneeded PUBDIR definitions
  * drop spelling-error lintian overrides about Antony Antony (no longer needed)

 -- Daniel Kahn Gillmor <email address hidden>  Mon, 18 Jun 2018 12:45:39 -0400

Available diffs

• diff from 3.23-4 to 3.23-5 (1.1 KiB)

libreswan (3.23-4) unstable; urgency=medium

  * d/tests/control: isolation-container → isolation-machine

 -- Daniel Kahn Gillmor <email address hidden>  Thu, 15 Feb 2018 12:03:58 -0500

Available diffs

• diff from 3.23-1 to 3.23-4 (854 bytes)
• diff from 3.23-3 to 3.23-4 (442 bytes)

libreswan (3.23-3) unstable; urgency=medium

  * d/tests/opportunistic: more details on failure

 -- Daniel Kahn Gillmor <email address hidden>  Wed, 14 Feb 2018 13:08:09 -0500

Available diffs

• diff from 3.23-2 to 3.23-3 (494 bytes)

libreswan (3.23-2) unstable; urgency=medium

  * d/tests/opportunistic: do not fail on initial systemctl status
  * d/control: Rules-Requires-Root: no

 -- Daniel Kahn Gillmor <email address hidden>  Tue, 13 Feb 2018 10:59:46 -0500

Available diffs

• diff from 3.23-1 to 3.23-2 (589 bytes)

libreswan (3.23-1) unstable; urgency=medium

  [ Daniel Kahn Gillmor ]
  * New upstream release
  * drop patches already upstream, refresh remaining patches

  [ Antony Antony ]
  * tests/opportunistic fix, asymetric dnssec test

  [ Daniel Kahn Gillmor ]
  * d/copyright: Format: use https
  * d/copyright: remove dropped file
  * avoid lintian complaint by skipping my skipped test :P
    (override_dh_auto_test-does-not-check-DEB_BUILD_PROFILES)
  * quit persecuting Antony Antony, again
  * fix spelling

 -- Daniel Kahn Gillmor <email address hidden>  Mon, 05 Feb 2018 16:23:59 -0500

Available diffs

• diff from 3.22-4 to 3.23-1 (850.2 KiB)

libreswan (3.22-4) unstable; urgency=medium

  * conflict with strongswan-libcharon (Closes: #886842)
  * Standards-Version: bump to 4.1.3 (no changes needed)
  * move to debhelper 11
  * Vcs: move to salsa.debian.org
  * clean up lintian overrides

 -- Daniel Kahn Gillmor <email address hidden>  Wed, 10 Jan 2018 12:01:37 -0500

Available diffs

• diff from 3.22-3 to 3.22-4 (1.3 KiB)

libreswan (3.22-3) unstable; urgency=medium

  * add more dependencies to autopkgtest

 -- Daniel Kahn Gillmor <email address hidden>  Mon, 13 Nov 2017 02:56:05 +0800

Available diffs

• diff from 3.22-2 to 3.22-3 (428 bytes)

libreswan (3.22-2) unstable; urgency=medium

  * fix debian c-i test so that it can ping

 -- Daniel Kahn Gillmor <email address hidden>  Sat, 11 Nov 2017 15:46:44 +0800

Available diffs

• diff from 3.22-1 to 3.22-2 (400 bytes)

libreswan (3.22-1) unstable; urgency=medium

  * new upstream release
  * drop patches already applied upstream
  * include two new patches as requested by upstream
  * include ipsec version from upstream release (Closes: #879614)
  * Standards-Version: bump to 4.1.1 (no changes needed)

 -- Daniel Kahn Gillmor <email address hidden>  Sat, 11 Nov 2017 14:02:02 +0800

Available diffs

• diff from 3.21-2 to 3.22-1 (2.5 MiB)

libreswan (3.21-2) unstable; urgency=medium

  [ Antony Antony ]
  * add systemd build dependency
  * Revert "USE_DNSSEC=false b/c upstream needs libunbound to link to libevent"
  * up libunbound2 build dependency to 1.6.5

  [ Daniel Kahn Gillmor ]
  * bump standards-version to 4.1.0 (no changes needed)
  * move to python3 instead of python
  * accept Antony Antony's name for real
  * avoid lintian griping that we cannot fix
  * fix spelling

 -- Daniel Kahn Gillmor <email address hidden>  Tue, 26 Sep 2017 02:39:40 -0400

Available diffs

• diff from 3.20-7build1 (in Ubuntu) to 3.21-2 (884.1 KiB)

libreswan (3.20-7build1) artful; urgency=medium

  * No-change rebuild against libevent-2.1-6

 -- Steve Langasek <email address hidden>  Mon, 31 Jul 2017 02:45:34 +0000

Available diffs

• diff from 3.20-7 (in Debian) to 3.20-7build1 (531 bytes)

libreswan (3.20-7) unstable; urgency=medium

  [ Laurent Bigonville ]
  * Enable SELinux/LABELED_IPSEC support (Closes: #861881)
  * Only depends against libcap-ng-dev on linux (Closes: #861887)

 -- Daniel Kahn Gillmor <email address hidden>  Fri, 05 May 2017 12:46:31 -0400

Available diffs

• diff from 3.20-6 to 3.20-7 (903 bytes)

libreswan (3.20-6) unstable; urgency=medium

  * another batch of fixes for time_t on x32

 -- Daniel Kahn Gillmor <email address hidden>  Tue, 21 Mar 2017 16:15:33 -0400

Available diffs

• diff from 3.19-2 to 3.20-6 (304.9 KiB)

libreswan (3.19-2) unstable; urgency=medium

  * more fixes from upstream
  * Test proposal for mips and mipsel builds (trying to fix: #853947)
  * conflict directly with strongswan-starter (Closes: #836862)

 -- Daniel Kahn Gillmor <email address hidden>  Fri, 03 Feb 2017 12:22:16 -0500

Available diffs

• diff from 3.19-1 to 3.19-2 (3.5 KiB)

libreswan (3.19-1) unstable; urgency=medium

  * drop patches already applied upstream, clean up remaining patches
  * cleaner build without KLIPS
  * fix spelling errors found by lintian
  * convert to debhelper 10
  * use wrap-and-sort -ast to canonicalize debian metadata files
  * upload to unstable for wider testing

 -- Daniel Kahn Gillmor <email address hidden>  Wed, 25 Jan 2017 20:14:04 -0500