From 6429eaa72192781f1d5836bf4288083717d850a3 Mon Sep 17 00:00:00 2001
From: rtr <rtr@pkgsrc.org>
Date: Tue, 19 Aug 2008 00:26:03 +0000
Subject: pullup ticket #2489 - requested by manu ipsec-tools: update package
 for cve

revisions pulled up:
pkgsrc/security/ipsec-tools/Makefile	1.28
pkgsrc/security/ipsec-tools/distinfo	1.15

   Module Name:    pkgsrc
   Committed By:   manu
   Date:           Sat Aug 16 06:55:18 UTC 2008

   Modified Files:
           pkgsrc/doc: CHANGES-2008
           pkgsrc/security/ipsec-tools: Makefile distinfo

   Log Message:
   Update to ipsec-tools 0.7.1, fixes CVE-2008-3652

   Changes since the 0.6 branch:
   0.7.1 - 23 July 2008
           o Fixes a memory leak when invalid proposal received
           o Some fixes in DPD
           o do not set default gss id if xauth is used
           o fixed hybrid enabled builds
           o fixed compilation on FreeBSD8
           o cleanup in network port value manipulation
           o gets ports from SADB_X_EXT_NAT_T_[SD]PORT if present in
   purge_ipsec_sp
   i()
           o Generates a log if cert validation has been disabled by
   configuration
           o better handling for pfkey socket read errors
           o Fixes in yacc / bison stuff
           o new plog() macro (reduced CPU usage when logging is disabled)
           o Try to works better with huge SPD/SAD
           o Corrected modecfg option syntax
           o Many other various fixes...

   0.7     - 09 August 2007
           o Xauth with pre-shared key PSK
           o Xauth with certificates
           o SHA2 support
           o pkcs7 support
           o system accounting (utmp)
           o Darwin support
           o configuration can be reloaded
           o Support for UNIQUE generated policies
           o Support for semi anonymous sainfos
           o Support for ph1id to remoteid matching
           o Plain RSA authentication
           o Native LDAP support for Xauth and modecfg
           o Group membership checks for Xauth and sainfo selection
           o Camellia cipher support
           o IKE Fragment force option
           o Modecfg SplitNet attribute support
           o Modecfg SplitDNS attribute support ( server side )
           o Modecfg Default Domain attribute support
           o Modecfg DNS/WINS server multiple attribute support
---
 security/ipsec-tools/Makefile | 7 +++----
 security/ipsec-tools/distinfo | 8 ++++----
 2 files changed, 7 insertions(+), 8 deletions(-)

diff --git a/security/ipsec-tools/Makefile b/security/ipsec-tools/Makefile
index 5fb138c40c2..a6362976194 100644
--- a/security/ipsec-tools/Makefile
+++ b/security/ipsec-tools/Makefile
@@ -1,9 +1,8 @@
-# $NetBSD: Makefile,v 1.27 2008/01/18 05:09:37 tnn Exp $
+# $NetBSD: Makefile,v 1.27.6.1 2008/08/19 00:26:03 rtr Exp $
 
-DISTNAME=		ipsec-tools-0.6.7
-PKGREVISION=		1
+DISTNAME=		ipsec-tools-0.7.1
 CATEGORIES=		security
-MASTER_SITES=		${MASTER_SITE_SOURCEFORGE:=ipsec-tools/}
+MASTER_SITES=		${MASTER_SITE_NETBSD:=ipsec-tools/}
 EXTRACT_SUFX=		.tar.bz2
 
 MAINTAINER=		manu@NetBSD.org
diff --git a/security/ipsec-tools/distinfo b/security/ipsec-tools/distinfo
index 5af347f6913..82d80cd0de1 100644
--- a/security/ipsec-tools/distinfo
+++ b/security/ipsec-tools/distinfo
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.14 2007/04/11 06:51:19 ghen Exp $
+$NetBSD: distinfo,v 1.14.12.1 2008/08/19 00:26:04 rtr Exp $
 
-SHA1 (ipsec-tools-0.6.7.tar.bz2) = ed3a6566409c506d5a7cd82cf263a5b8df3fad55
-RMD160 (ipsec-tools-0.6.7.tar.bz2) = 97c27922f5be941fd6c69e35e69bed921b9f13e7
-Size (ipsec-tools-0.6.7.tar.bz2) = 723032 bytes
+SHA1 (ipsec-tools-0.7.1.tar.bz2) = 7a2ef71ece73710bf9a5ef2f63aacfcea1c58efb
+RMD160 (ipsec-tools-0.7.1.tar.bz2) = 98c5bb292006fb49eb78133059ee74d0dd3b8122
+Size (ipsec-tools-0.7.1.tar.bz2) = 784046 bytes
-- 
cgit v1.2.3