[ubuntu/kinetic-proposed] libreswan 4.7-1ubuntu1 (Accepted)

Sat Oct 8 06:00:56 UTC 2022

libreswan (4.7-1ubuntu1) kinetic; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - d/tests/control: make opportunistic and cavp skippable if builder
      doesn't have access to internet.
    - d/tests/opportunistic: if ping or wget fails then exit 77 to skip
      the test.
    - d/tests/cavp: if wget fails then exit 77 to skip the test.
  * Dropped changes, superseded upstream:
    - d/patches/fix-libselinux3.1-deprecated.patch: this fixes current
      ftbfs with libselinux3.1.
    - d/patches/fix-ftbfs-s390x.patch: fix maybe-uninitialized
      warning/error.

libreswan (4.7-1) unstable; urgency=medium

  * New upstream release
  * move to DEP-14 branch naming
  * refresh patches
  * Standards-Version: bump to 4.6.1 (no changes needed)

libreswan (4.6-1) unstable; urgency=medium

  * New upstream version
    - Fixes CVE-2022-23094
  * Drop patch already upstream
  * Refresh patches
  * Clean up lintian-overrides

libreswan (4.5-2) unstable; urgency=medium

  * Make ikev1-policy default to "drop"

libreswan (4.5-1) unstable; urgency=medium

  * New upstream release
  * override lintian about long lines in tests
  * USE_FIPSCHECK=false is no longer needed
  * d/copyright: track file movement
  * add debian/* stanza to d/copyright
  * standards-version: bump to 4.6.0 (no changes needed)
  * override spurious lintian warnings
  * drop bashisms from letsencrypt

libreswan (4.3-1) unstable; urgency=medium

  * New upstream release
  * drop patches already upstream
  * refresh patches
  * d/copyright: drop unreferenced lib/libswan/initsubnet.c

libreswan (4.2-1) unstable; urgency=medium

  * New upstream release 4.2
  * drop spelling patch already merged upstream
  * fix more spelling
  * move from USE_XAUTHPAM to USE_AUTHPAM, as recommended by upstream

libreswan (4.1-4) unstable; urgency=medium

  * supply the same flags during install as during build
  * embed a copy of AVA on platforms where NSS is missing it

libreswan (4.1-3) unstable; urgency=medium

  * Use proper toolchain feature tests (and include IPSEC_PROFILE)
  * make cryptocheck tests more verbose

libreswan (4.1-2) unstable; urgency=medium

  * change default development branch to debian/main
  * handle platforms without a stack-protector
  * Autodetect whether to use pure NSS for KDF
  * drop unnecessary rejection of KLIPS
  * make algparse test more verbose
  * Drop bsdmainutils as a dependency (Closes: #964535)

libreswan (4.1-1) unstable; urgency=medium

  * New upstream version (Closes: #957473, #966017)
  * Standards-Version: bumped to 4.5.1 (no changes needed)
  * Set upstream metadata fields: Bug-Database, Bug-Submit, Repository,
    Repository-Browse.
  * refresh patches
  * clean up debian/copyright, following upstream cleanup
  * indicate that neither of these patches need to be forwarded upstream
  * d/rules: track new compilation configuration from upstream
  * drop unneeded lintian overrides
  * clean up spelling
  * avoid shipping accidental backup files

Date: Fri, 07 Oct 2022 22:28:57 -0700
Changed-By: Steve Langasek <steve.langasek at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/libreswan/4.7-1ubuntu1
-------------- next part --------------
Format: 1.8
Date: Fri, 07 Oct 2022 22:28:57 -0700
Source: libreswan
Built-For-Profiles: noudeb
Architecture: source
Version: 4.7-1ubuntu1
Distribution: kinetic
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Steve Langasek <steve.langasek at ubuntu.com>
Closes: 957473 964535 966017
Changes:
 libreswan (4.7-1ubuntu1) kinetic; urgency=low
 .
   * Merge from Debian unstable. Remaining changes:
     - d/tests/control: make opportunistic and cavp skippable if builder
       doesn't have access to internet.
     - d/tests/opportunistic: if ping or wget fails then exit 77 to skip
       the test.
     - d/tests/cavp: if wget fails then exit 77 to skip the test.
   * Dropped changes, superseded upstream:
     - d/patches/fix-libselinux3.1-deprecated.patch: this fixes current
       ftbfs with libselinux3.1.
     - d/patches/fix-ftbfs-s390x.patch: fix maybe-uninitialized
       warning/error.
 .
 libreswan (4.7-1) unstable; urgency=medium
 .
   * New upstream release
   * move to DEP-14 branch naming
   * refresh patches
   * Standards-Version: bump to 4.6.1 (no changes needed)
 .
 libreswan (4.6-1) unstable; urgency=medium
 .
   * New upstream version
     - Fixes CVE-2022-23094
   * Drop patch already upstream
   * Refresh patches
   * Clean up lintian-overrides
 .
 libreswan (4.5-2) unstable; urgency=medium
 .
   * Make ikev1-policy default to "drop"
 .
 libreswan (4.5-1) unstable; urgency=medium
 .
   * New upstream release
   * override lintian about long lines in tests
   * USE_FIPSCHECK=false is no longer needed
   * d/copyright: track file movement
   * add debian/* stanza to d/copyright
   * standards-version: bump to 4.6.0 (no changes needed)
   * override spurious lintian warnings
   * drop bashisms from letsencrypt
 .
 libreswan (4.3-1) unstable; urgency=medium
 .
   * New upstream release
   * drop patches already upstream
   * refresh patches
   * d/copyright: drop unreferenced lib/libswan/initsubnet.c
 .
 libreswan (4.2-1) unstable; urgency=medium
 .
   * New upstream release 4.2
   * drop spelling patch already merged upstream
   * fix more spelling
   * move from USE_XAUTHPAM to USE_AUTHPAM, as recommended by upstream
 .
 libreswan (4.1-4) unstable; urgency=medium
 .
   * supply the same flags during install as during build
   * embed a copy of AVA on platforms where NSS is missing it
 .
 libreswan (4.1-3) unstable; urgency=medium
 .
   * Use proper toolchain feature tests (and include IPSEC_PROFILE)
   * make cryptocheck tests more verbose
 .
 libreswan (4.1-2) unstable; urgency=medium
 .
   * change default development branch to debian/main
   * handle platforms without a stack-protector
   * Autodetect whether to use pure NSS for KDF
   * drop unnecessary rejection of KLIPS
   * make algparse test more verbose
   * Drop bsdmainutils as a dependency (Closes: #964535)
 .
 libreswan (4.1-1) unstable; urgency=medium
 .
   * New upstream version (Closes: #957473, #966017)
   * Standards-Version: bumped to 4.5.1 (no changes needed)
   * Set upstream metadata fields: Bug-Database, Bug-Submit, Repository,
     Repository-Browse.
   * refresh patches
   * clean up debian/copyright, following upstream cleanup
   * indicate that neither of these patches need to be forwarded upstream
   * d/rules: track new compilation configuration from upstream
   * drop unneeded lintian overrides
   * clean up spelling
   * avoid shipping accidental backup files
Checksums-Sha1:
 f27598b6a01a9910cdc11e16bc72cea369a625e1 2767 libreswan_4.7-1ubuntu1.dsc
 d6ea40c33fde9a2f3b81fdbca5a915844fc9ad93 3684167 libreswan_4.7.orig.tar.gz
 0b198d01c5c6863c29ec1f593bd0357a66f995c6 862 libreswan_4.7.orig.tar.gz.asc
 2aa5334b2eabcf5558afcd65b03d8b5d73898f1b 15564 libreswan_4.7-1ubuntu1.debian.tar.xz
 be901d69c2a6ccd504ffc916c5e06df45c0b3f16 7933 libreswan_4.7-1ubuntu1_source.buildinfo
Checksums-Sha256:
 d3c36eec345c940f8372164ac8bf8b2f2790842103a1c37ce9d903c273f30913 2767 libreswan_4.7-1ubuntu1.dsc
 ddd6337b3900063d870301c3d9f61f56107c765850fb00a163d360359ff3fc44 3684167 libreswan_4.7.orig.tar.gz
 99f7c556b30c3e400300bb0dc80a515174541a06f489e1ed436ed69b46b3df21 862 libreswan_4.7.orig.tar.gz.asc
 8150dde79cabcdc4bd14a069c445bb43dcc2d3bbc823e0c10472240e8bf82be9 15564 libreswan_4.7-1ubuntu1.debian.tar.xz
 dfef0e256f6ecee4b98b9ec4b4ed80d9cb590f3a69becf66e0fd9fa49f3cb6a8 7933 libreswan_4.7-1ubuntu1_source.buildinfo
Files:
 dfdbd467dd329802476249f937edd635 2767 net optional libreswan_4.7-1ubuntu1.dsc
 73cdbb07b851e8a48af2aad691ec19b7 3684167 net optional libreswan_4.7.orig.tar.gz
 d96a80652507b297ba412b8815758a0a 862 net optional libreswan_4.7.orig.tar.gz.asc
 5661e3fc640b792534db0da7db0ce356 15564 net optional libreswan_4.7-1ubuntu1.debian.tar.xz
 5bc477223b84c9b9d6a325f3a8ec3dc3 7933 net optional libreswan_4.7-1ubuntu1_source.buildinfo
Original-Maintainer: Daniel Kahn Gillmor <dkg at fifthhorseman.net>