CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

security/ipsec-tools0.8.2_13

KAME racoon IKE daemon, ipsec-tools version

Maintainer
eugen@FreeBSD.org
Packages
ipsec-tools 0.8.2_13
Upstream
up to date
CPE
ipsec-tools:ipsec-tools from the port
WWW
http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/dist/ipsec-tools/src/racoon/
Links
cgit · VuXML

Unaddressed (1) · The CVE record lists this version as affected, no VuXML entry names the CVE

CVE-2015-40477.82015-05-29racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP req…

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (4)

Show 4 fixed
VuXML entries whose affected range this version has left, plus CVEs whose record still lists this version although VuXML considers them fixed (usually a backported fix).
CVE-2016-103967.52017-07-06VuXML · The racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable computational-complexity attack when parsing and storing ISAKMP fragments. The implementation perm…

Commits (95)

Marcus von Appen (mva) · 0.8.0_3
- Convert USE_ICONV=yes to USES=iconv - Change USE_GNOME=pkgconfig|gnomehack to USES=pathfix|pkgconfig and   USE_GETTEXT=yes to USES=gettext while here
95e7081976
Baptiste Daroussin (bapt) · 0.8.0_3
Convert vanhu@ ports to new options framework Removed optionnal dependency on the deprecated py-visual for net/scapy

Approved by:	maintainer (vanhu)
7c736f500c
Doug Barton (dougb) · 0.8.0_3
Move the rc.d scripts of the form *.sh.in to *.in

Where necessary add $FreeBSD$ to the file

No PORTREVISION bump necessary because this is a no-op
9aac569eaa
Jason Helfman (jgh) · 0.8.0_3
Apply utmp patch from ${FILESDIR} (not files) if OSVERSION <  900007

Spotted by: Jason Hellenthal <jhell at DataIX.net>
Approved by:	crees,rene (mentors,implicit)
01f239ee0f
Doug Barton (dougb) · 0.8.0_2
In the rc.d scripts, change assignments to rcvar to use the literal name_enable wherever possible, and ${name}_enable when it's not, to prepare for the demise of set_rcvar().

In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
83eb2c3700
Doug Barton (dougb) · 0.8.0_2
Fix the rc.d script to avoid unconditional code execution, and various other cleanups.
8d5d707de8
Stephen Montgomery-Smith (stephen) · 0.8.0_1
- Fix startup script rc.d/racoon. - Bump portrevision.

PR:		ports/148605
Submitted by:	John Hein <jhein@symmetricom.com>
Approved by:	maho (mentor) and vanhu@netasq.com (maintainer)
537fa88c5f
Florian Smeets (flo) · 0.8.0
- update to 0.8.0

PR:		ports/155883
Submitted by:	vanhu (maintainer)
8a131b63e8
Ade Lovett (ade) · 0.7.3
Sync to new bsd.autotools.mk
4a8684e352
Doug Barton (dougb) · 0.7.3
Begin the process of deprecating sysutils/rc_subr by s#. %%RC_SUBR%%#. /etc/rc.subr#
1d6b4b3f91
Martin Wilke (miwi) · 0.7.3
- Mark BROKEN on HEAD: fails to build with new utmpx

Reported by:	pointyhat
5a23bb49bd
Martin Wilke (miwi) · 0.7.3
- Update to 0.7.3

PR:		137966
Submitted by:	VANHULLEBUS Yvan <vanhu@netasq.com> (maintainer)
d7bc82e497
Jeremy Messenger (mezz) · 0.7.2
-Repocopy devel/libtool15 -> libtool22 and libltdl15 -> libltdl22. -Update libtool and libltdl to 2.2.6a. -Remove devel/libtool15 and devel/libltdl15. -Fix ports build with libtool22/libltdl22. -Bump ports that depend on libltdl22 due to shared library version change. -Explain what to do update in the UPDATING.

It has been tested with GNOME2, XFCE4, KDE3, KDE4 and other many wm/desktop
and applications in the runtime.

With help:	marcus and kwm
Pointyhat-exp:	a few times by pav
Tested by:	pgollucci, "Romain Tartière" <romain@blogreen.org>, and
		a few MarcusCom CVS users. Also, I might have missed a few.
Repocopy by:	marcus
Approved by:	portmgr
789d75c728
Doug Barton (dougb) · 0.7.2
Fix a few "bad example" problems in the rc.d scripts that have been propogated by copy and paste.

1. Primarily the "empty variable" default assignment, which is mostly
${name}_flags="", but fix a few others as well.
2. Where they are not already documented, add the existence of the _flags
(or other deleted empties) option to the comments, and in some cases add
comments from scratch.
3. Replace things that look like:
prefix=%%PREFIX%%
command=${prefix}/sbin/foo
to just use %%PREFIX%%. In many cases the $prefix variable is only used
once, and in some cases it is not used at all.
4. In a few cases remove ${name}_flags from command_args
5. Remove a long-stale comment about putting the port's rc.d script in
/etc/rc.d (which is no longer necessary).

No PORTREVISION bumps because all of these changes are noops.
0175383f0a
Wesley Shields (wxs) · 0.7.2
- Update to 0.7.2. This release fixes a remote DoS bug with IKE   fragmentation reassembly.

PR:		ports/133922
Submitted by:	VANHULLEBUS Yvan <vanhu@netasq.com> (maintainer)
60e37f26a0
Rong-En Fan (rafan) · 0.7.1
Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script. Specifically, newer autoconf (> 2.13) has different semantic of the configure target. In short, one should use --build=CONFIGURE_TARGET instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning and the old semantic may be removed in later autoconf releases.

To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.

To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.

Changes to Mk/*:
 - Add runtime detection magic in bsd.port.mk
 - Remove CONFIGURE_TARGET hack in various bsd.*.mk
 - USE_GNOME=gnometarget is now an no-op

Changes to individual ports, other than removing the CONFIGURE_TARGET hack:

= pkg-plist changed (due to the ugly CONFIGURE_TARGET prefix in * executables)
  - comms/gnuradio
  - science/abinit
  - science/elmer-fem
  - science/elmer-matc
  - science/elmer-meshgen2d
  - science/elmerfront
  - science/elmerpost

= use x86_64 as ARCH
  - devel/g-wrap

= other changes
  - print/magicfilter
    GNU_CONFIGURE -> HAS_CONFIGURE since it's not generated by autoconf

Total # of ports modified:  1,027
Total # of ports affected: ~7,000 (set GNU_CONFIGURE to yes)

PR:		126524 (obsoletes 52917)
Submitted by:	rafan
Tested on:	two pointyhat 7-amd64 exp runs (by pav)
Approved by:	portmgr (pav)
741aa71483
Tilman Keskinoz (arved) · 0.7.1
Add an WITH_LDAP option enable hybrid, xauth and mode-cfg per default

PR:		125748
Submitted by:	Matthew Grooms
Approved by:	vanhu (maintainer)
d31eb81ef0
Beech Rintoul (beech) · 0.7.1
- Update to 0.7.1

PR:		ports/125957
Submitted by:	VANHULLEBUS Yvan <vanhu@netasq.com> (maintainer)
b190a8cde5
Tom McLaughlin (tmclaugh) · 0.7
Fix build on 7.x when RC5 support is enabled.

PR:		103084, 122187
Submitted by:	Dmitry A Grigorovich
Approved by:	maintainer
b7917da8c5
Beech Rintoul (beech) · 0.7
- Fix: Have the racoon startup script [optionally] create its required dirs.

PR:		ports/117128
Submitted by:	John Hein <jhein@timing.com>
Approved by:	VANHULLEBUS Yvan <vanhu@netasq.com> (maintainer)
fffceacc53
Edwin Groothuis (edwin) · 0.7
Remove always-false/true conditions based on OSVERSION 500000
13441eac4b
Tilman Keskinoz (arved) · 0.7
Update to 0.7

PR:		115978
Submitted by:	VANHULLEBUS Yvan <vanhu@netasq.com>
3b616a5ff7
Gabor Kovesdan (gabor) · 0.6.7
- Remove the DESTDIR modifications from individual ports as we have a new,   fully chrooted DESTDIR, which does not need such any more.

Sponsored by:	Google Summer of Code 2007
Approved by:	portmgr (pav)
42542fb076
Rong-En Fan (rafan) · 0.6.7
- Revert changes to patch-configure. It was slipped in when committing   fix for gcc 4.x

Noticed by:   sat
Approved by:  maintainer (implicit)
f71d92ccef
Rong-En Fan (rafan) · 0.6.7
- Fix build with gcc 4.x - While I'm here, remove extra empty line in distinfo

PR:	       ports/113383
Submitted by:  rafan
Approved by:   VANHULLEBUS Yvan <yvan.vanhullebus at netasq.com> (maintainer)
b159d8aee9
Cheng-Lung Sung (clsung) · 0.6.7
- Version 0.6.7 of ipsec-tools is out, which fixes an easy to exploit   Denial of Service (CVE-2007-1841).

PR:		ports/111319
Submitted by:	maintainer (VANHULLEBUS Yvan)
Security:	CVE-2007-1841
7980df1cc6
Kris Kennaway (kris) · 0.6.6
Use libtool port instead of included version to avoid objformat a.out botch
ae994c8ea8
Andrew Pantyukhin (sat) · 0.6.6
- An option to force NATT functionality - Sneak in master sites beautification and use_ldconfig   while I'm here

PR:		ports/105488
Submitted by:	bz
Approved by:	VANHULLEBUS Yvan <yvan.vanhullebus@netasq.com> (maintainer)
c6f1382e04
Andrew Pantyukhin (sat) · 0.6.6
- There should be only one site in the WWW line and kame is obsolete anyway
c452887cf1
Pav Lucistnik (pav) · 0.6.6
- Add patch for people having trouble compiling OpenSSL bits

PR:		ports/97442
Submitted by:	Dmitry Andrianov <dimas@dataart.com>
Approved by:	VANHULLEBUS Yvan <yvan.vanhullebus@netasq.com> (maintainer)
69a56c54c8
Pav Lucistnik (pav) · 0.6.6
- Update to 0.6.6

PR:		ports/98902
Submitted by:	VANHULLEBUS Yvan <vanhu@netasq.com> (maintainer)
0e54122ba5
Renato Botelho (garga) · 0.6.5_2
Makefile: - introduce OPTIONS to enable/disable features - add more features to the OPTION dialog - choose reasonable defaults for OPTIONS (disabled patented stuff) - remove usesless WRKSRC line - move LDFLAGS to the place where it is necessary - extend CONFIGURE_ARGS to set the directory for the adminport socket   * Note: racoonctl is useless without adminport enabled   * create the socket dir in

pkg-descr:
- shortened by one line to please portlint

pkg-plist:
- slight reorganization
- add create instructions for the adminport socket dir for the
  "installing from package" case
- add removal instructions for the adminport socket dir

files/patch-configure:
- add some stuff to detect libiconv when the GSSAPI OPTION is enabled
- iconv is required for GSSAPI but the library is not added to LIBS
  in the original configure script
- Why not use USE_AUTOTOOLS and patch configure.ac?
  * because the leads to configure running twice which is useless
    overhead. I found no way to avoid this so we patch configure.

files/racoon.sh.in:
- add the adminsocket directory to required_dirs

PR:		ports/96368
Submitted by:	Joerg Pulz <Joerg.Pulz@frm2.tum.de>
Approved by:	maintainer
485163afc0
Ade Lovett (ade) · 0.6.5_1
Conversion to a single libtool environment.

Approved by:	portmgr (kris)
8503536d38
Doug Barton (dougb) · 0.6.5
Remove the FreeBSD KEYWORD from all rc.d scripts where it appears. We have not checked for this KEYWORD for a long time now, so this is a complete noop, and thus no PORTREVISION bump. Removing it at this point is mostly for pedantic reasons, and partly to avoid perpetuating this anachronism by copy and paste to future scripts.
c49d1a3273
Simon Barner (barner) · 0.6.5
- Update to 0.6.5

Submitted by:	VANHULLEBUS Yvan <vanhu@netasq.com> (maintainer)
PR:		ports/92838
49a2a95b33
Vasil Dimov (vd) · 0.6.4_2
Change facility from daemon to security, because daemon.info goes to devnull by default

PR:		ports/91047
Submitted by:	PR: Brian Candler <B.Candler@pobox.com>, patch: VANHULLEBUS Yvan <vanhu@netasq.com> (maintainer)
Approved by:	garga (mentor)
8a8114f0c1
Edwin Groothuis (edwin) · 0.6.4_1
Replace ugly "@unexec rmdir %D... 2>/dev/null || true" with @dirrmtry

Approved by:    krion@
PR:             ports/88711 (related)
508b8d82f4
Edwin Groothuis (edwin) · 0.6.4_1
ports/security/ipsec-tools enables itself at startup

ports/security/ipsec-tools rc.d script defaults to 'enabled'

	It also installs its own versions of setkey and libipsec.so
	which seems redundant as they are part of the base system
	and should be used in preference.

Submitted by:	Vivek Khera <vivek@khera.org>
PR:		ports/91317
2490b762f7
Marcus Alves Grando (mnag) · 0.6.4
Update to 0.6.4

PR:		90326
Submitted by:	maintainer
f830909ab5
Sam Lawrance (lawrance) · 0.6.3
- Change the location of racoon configuration files to /usr/local/etc/racoon,   bringing it in line with the old security/racoon port and the handbook [1] - Make use of USE_RC_SUBR instead of home-grown substitution and install - Prevent installation of some intermediate sample configuration files

PR:		ports/89273 [1]
Submitted by:	Angelo Turetta <aturetta@bestunion.it> [1]
Approved by:	VANHULLEBUS Yvan <vanhu@netasq.com> (maintainer)
12df895f92
Sergey Matveychuk (sem) · 0.6.3
- Update to 0.6.3. It fixes some crashes,   including potential DoS in aggressive mode. - Add SHA256

PR:		ports/89365
Submitted by:	ANHULLEBUS Yvan (maintainer)
9c2893448c
Ade Lovett (ade) · 0.6.2
Mass-conversion to the USE_AUTOTOOLS New World Order.  The code present in bsd.autotools.mk essentially makes this a no-op given that all the old variables set a USE_AUTOTOOLS_COMPAT variable, which is parsed in exactly the same way as USE_AUTOTOOLS itself.

Moreover, USE_AUTOTOOLS has already been extensively tested by the GNOME
team -- all GNOME 2.12.x ports use it.

Preliminary documentation can be found at:
	http://people.FreeBSD.org/~ade/autotools.txt

which is in the process of being SGMLized before introduction into the
Porters Handbook.

Light blue touch-paper.  Run.
54a0b86543
Emanuel Haupt (ehaupt) · 0.6.2
Update to 0.6.2

PR:		88042
Submitted by:	VANHULLEBUS Yvan <yvan.vanhullebus@netasq.com> (maintainer)
73fa60d495
Vsevolod Stakhov (vsevolod) · 0.6.1
Update to 0.6.1

Submitted by:	Yvan Vanhullebus (maintainer)
d11db448ed
Vsevolod Stakhov (vsevolod) · 0.6
Add IPSec tools port - the new "official" version of racoon, is the only one which is maintained and have lots of new features.

PR:		85544
Submitted by:	VANHULLEBUS Yvan <vanhu@netasq.com>
Approved by:	perky (mentor)
9eebd2f131