Changelog for libreswan-3.16-1.el6.sme.x86_64.rpm :

* Sat Dec 19 2015 Paul Wouters - 3.16-1- Updated to libreswan-3.16
* Thu Oct 15 2015 Paul Wouters - 3.15-5- Resolves: rhbz#1272317 libreswan FIPS test mistakenly looks for non-existent file hashes- Resolves: rhbz#1271778 ipsec whack man page discrepancies
* Tue Sep 29 2015 Paul Wouters - 3.15-4- Updates: rhbz#1233303 add libreswan to RHEL6 (fix source confusion)
* Mon Sep 28 2015 Paul Wouters - 3.15-3- Updates: rhbz#1233303 add libreswan to RHEL6
* Tue Sep 15 2015 Paul Wouters - 3.15-2- Resolves: rhbz#1259208 CVE-2015-3240- Merge rhel6 and rhel7 spec into one- Be lenient for racoon padding behaviour- Fix seedev option to /dev/random- Some IKEv1 PAM methods always gave \'Permission denied\'- Parser workarounds for differences in gcc/flex/bison on rhel6/rhel7- Parser fix to allow specifying time without unit (openswan compat)- Fix Labeled IPsec on rekeyed IPsec SA\'s- Workaround for wrong padding by racoon2- Disable NSS HW GCM to workaround rhel6 xen builers bug
* Wed Aug 19 2015 Paul Wouters - 3.14-1- Resolves: rhbz#1233303 add libreswan to RHEL6- Resolves: CVE-2015-3240 denial of service via IKE daemon restart when receiving a bad DH gx
* Fri May 29 2015 Paul Wouters - 3.12-10.1- Resolves: rhbz#1226407 CVE-2015-3204 libreswan: crafted IKE packet causes daemon restart
* Tue May 05 2015 Paul Wouters - 3.12-10- Resolves: rhbz#1213652 Support CAVS [updated another prf() free symkey, bogus fips mode fix]
* Tue Apr 28 2015 Paul Wouters - 3.12-9- Resolves: rhbz#1213652 Support CAVS [updated to kill another copy of prf()]- Resolves: rhbz#1208023 Libreswan with IPv6 [updated patch by Jaroslav Aster]- Resolves: rhbz#1208022 libreswan ignores module blacklist [updated modprobe handling]
* Mon Apr 20 2015 Paul Wouters - 3.12-8- Resolves: rhbz#1213652 Support CAVS testing of the PRF/PRF+ functions
* Mon Apr 13 2015 Paul Wouters - 3.12-7- Resolves: rhbz#1208022 libreswan ignores module blacklist rules- Resolves: rhbz#1208023 Libreswan with IPv6 in RHEL7 fails after reboot- Resolves: rhbz#1211146 pluto crashes in fips mode
* Tue Mar 17 2015 Paul Wouters - 3.12-6- Resolves: rhbz#1198650 SELinux context string size limit- Resolves: rhbz#1198649 Add new option for BSI random requirement
* Tue Jan 20 2015 Paul Wouters - 3.12-5- Resolves: rhbz#826264 aes-gcm implementation support (for IKEv2)- Resolves: rhbz#1074018 Audit key agreement (integ gcm fixup)
* Tue Dec 30 2014 Paul Wouters - 3.12-4- Resolves: rhbz#1134297 aes-ctr cipher is not supported- Resolves: rhbz#1131503 non-zero rSPI on INVALID_KE (and proper INVALID_KE handling)
* Thu Dec 04 2014 Paul Wouters - 3.12-2- Resolves: rhbz#1105171 (Update man page entry)- Resolves: rhbz#1144120 (Update for ESP CAMELLIA with IKEv2)- Resolves: rhbz#1074018 Audit key agreement
* Fri Nov 07 2014 Paul Wouters - 3.12-1- Resolves: rhbz#1136124 rebase to libreswan 3.12- Resolves: rhbz#1052811 [TAHI] (also clear reserved flags for isakmp_sa header)- Resolves: rhbz#1157379 [TAHI][IKEv2] IKEv2.EN.R.1.3.3.1: Non RESERVED fields in INFORMATIONAL request
* Mon Oct 27 2014 Paul Wouters - 3.11-2- Resolves: rhbz#1136124 rebase to libreswan 3.11 (coverity fixup, dpdaction=clear fix)
* Wed Oct 22 2014 Paul Wouters - 3.11-1- Resolves: rhbz#1136124 rebase to libreswan 3.11- Resolves: rhbz#1099905 ikev2 delete payloads are not delivered to peer- Resolves: rhbz#1147693 NetworkManger-libreswan can not connect to Red Hat IPSec Xauth VPN- Resolves: rhbz#1055865 [TAHI][IKEv2] libreswan do not ignore the content of version bit- Resolves: rhbz#1146106 Pluto crashes after start when some ah algorithms are used- Resolves: rhbz#1108256 addconn compatibility with openswan- Resolves: rhbz#1152625 [TAHI][IKEv2] IKEv2.EN.I.1.1.6.2 Part D: Integrity Algorithm AUTH_AES_XCBC_96 fail- Resolves: rhbz#1119704 [TAHI][IKEv2]IKEv2Interop.1.13a test fail- Resolves: rhbz#1100261 libreswan does not send response when when it receives Delete Payload for a CHILD_SA- Resolves: rhbz#1100239 ikev2 IKE SA responder does not send delete request to IKE SA initiator- Resolves: rhbz#1052811 [TAHI][IKEv2]IKEv2.EN.I.1.1.11.1: Non zero RESERVED fields in IKE_SA_INIT response- Resolves: rhbz#1126868 ikev2 sequence numbers are implemented incorrectly- Resolves: rhbz#1145245 Libreswan appears to start with systemd before all the NICs are up and running.- Resolves: rhbz#1145231 libreswan 3.10 upgrade breaks old ipsec.secrets configs- Resolves: rhbz#1144123 Add ESP support for AES_XCBC hash for USGv6 and IPsec-v3 compliance- Resolves: rhbz#1144120 Add ESP support for CAMELLIA for USGv6 and IPsec-v3 compliance- Resolves: rhbz#1099877 Missing man-pages ipsec_whack, ipsec_manual- Resolves: rhbz#1100255 libreswan Ikev2 implementation does not send an INFORMATIONAL response when it receives an INFORMATIONAL request with a Delete Payload for an IKE_SA
* Tue Sep 09 2014 Paul Wouters - 3.10-3- Resolves: rhbz#1136124 rebase to 3.10 (auto=route bug on startup)
* Mon Sep 08 2014 Paul Wouters - 3.10-2- Resolves: rhbz#1136124 rebase to libreswan 3.10
* Mon Jul 14 2014 Paul Wouters - 3.8-6- Resolves: rhbz#1092047 pluto cannot write to directories not owned by root
* Thu Apr 10 2014 Paul Wouters - 3.8-5- Resolves: rhbz#1052834 create_child_sa message ID handling
* Tue Mar 18 2014 Paul Wouters - 3.8-4- Resolves: rhbz#1052834 create_child_sa response
* Wed Mar 05 2014 Paul Wouters - 3.8-3- Resolves: rhbz#1069024 erroneous debug line with mixture [...]- Resolves: rhbz#1030939 update nss/x509 documents, don\'t load acerts- Resolves: rhbz#1058813 newhostkey returns zero value when it fails
* Fri Jan 24 2014 Daniel Mach - 3.8-2- Mass rebuild 2014-01-24
* Thu Jan 16 2014 Paul Wouters - 3.8-1- Resolves: rhbz#CVE-2013-6467 - Resolves: rhbz#1043642 rebase to version 3.8- Resolves: rhbz#1029912 ipsec force-reload doesn\'t work- Resolves: rhbz#826261 Implement SHA384/512 support for Openswan- Resolves: rhbz#1039655 ipsec newhostkey generates false configuration
* Fri Dec 27 2013 Daniel Mach - 3.6-3- Mass rebuild 2013-12-27
* Fri Nov 08 2013 Paul Wouters - 3.6-2- Fix race condition in post for creating nss db
* Thu Oct 31 2013 Paul Wouters - 3.6-1- Updated to version 3.6 (IKEv2, MODECFG, Cisco interop fixes)- Generate empty NSS db if none exists- FIPS update using /etc/system-fips- Provide: openswan-doc
* Fri Aug 09 2013 Paul Wouters - 3.5-2- rebuilt and bumped EVR to avoid confusion of import->delete->import- require iproute
* Mon Jul 15 2013 Paul Wouters - 3.5-1- Initial package for RHEL7- Added interop patch for (some?) Cisco VPN clients sending 16 zero bytes of extraneous IKE data- Removed fipscheck_version