| 2.5.44 | Prepare for zerocopy NFS and IPSEC |
| 2.5.45 | Add transform engine and AH implementation. |
| 2.5.47 | IPSEC updates |
| 2.5.48 | More fixes and corrections |
| 2.5.49 | Fix double unlock in esp/ah Policy timeout and pfkey acquire fixes Make xfrm_user key manager return proper errors |
| 2.5.56 | Uninline _decode_session Clean up key manager algorithm handling Dont check algorithm availability unless CONFIG_CRYPTO |
| 2.5.60 | Clear SKB checksum state when mangling Fix some buglets in xfrm_user.c Block on connect for IPSEC keying remove trailer_len from esp and xfrm properties Update ah documentation Convert esp auth to use proper crypto api calls Generic ICV handling for ESP Revert previous change to ip_route_connect |
| 2.5.61 | Make AF_KEY allow NULL encryption Make sure to clear sin_zero in AF_KEY Add missed bit of sin_zero fix Make sure SADB_X_SPDADD messages have proper spid Fix mis-patch of previous changes Add ipv6 support infrastructure ipv6_syms needs net/xfrm.h Fix af_key.c build Mark pfkey_sadb_addr2xfrm_addr static again |
| 2.5.63 | Add ipv6 support to ipsec netlink sockets Add missing credit and include to xfrm_user ipv6 changes Move xfrm6 policy code to net/ipv4/xfrm_policy.c Export xfrm6 type registry interfaces Remove xfrm6 exports from ipv6_syms.c |
| 2.5.64 | Make sure ESP output pads Null Encryption properly |
| 2.5.65 | Add family argument to compile_policy Use dst_hold unless assigning result to something Add full ipv6 support Fix build when ipsec is disabled |
| 2.5.66 | Fix obvious typo in xfrm_sk_clone_policy fragmentation & tcp mss calculation Fix null authentication/encryption fix skb leak in ah and esp return error when no dst in ah & esp output Add IPV6_{IPSEC,XFRM}_POLICY socket option support Export xfrm_user_policy net/xfrm.h needs net/sock.h Fix socket leak in TCP/v6 when policy lookup fails Fix parsing of 16-bit ipcomp cpi IPV6 source address not set correctly in xfrm_state Fix SKB alloc len in ip6_build_xmit Add initial compression support for pfkey and xfrm_algo Split up XFRM Subsystem Fix minor mispatch of xfrm splitup patch Fix bug in xfrm_parse_spi() |
| 2.5.67 |
Make get_acqseq() xfrm_state.c:xfrm_get_acqseq() Fix IPV6 UDP policy checking, Move xfrm_*.c into net/xfrm/ Kill skb_ah_walk, not needed Remove duplicate / obsolete entry in include/linux/dst.h Remove unused field 'owner' from selector linux/xfrm.h u32 --> __u32 Missing ipv6 policy checks IPV6 AH/ESP fixes Use "sizeof" for header sizes Fix xfrm_state refcounts In TCP/v6 input check policy before socket filter xfrm_{state,user}.c need asm/uaccess.h Use of "sizeof" for header sizes, part II Missing xfrm_state use_time updates Implement UDP Encapsulation framework Revert xfrm_state use_time patch, it was wrong Store xfrm_encap_tmpl directly in xfrm_state Clean up decap state, minimize its size |
| 2.5.68 | Move xfrm type destructor out of spinlock AH/ESP forget to free private structs Really move type destructor out of spinlock Support for optional policies on input got lost Avoid using SET_MODULE_OWNER Check xfrm state expiration on input after replay check Add initial IPCOMP support Add ipv4 tunnel transformer Fix handling of uncompressable packets in tunnel mode |
| 2.5.69 | nexthdr in xfrm6_input needs to be int allow only tunnel mode in xfrm4_tunnels pmtu discovery support at local tunnel gateway Consolidate some output code into xfrm_check_output |
| 2.5.70 | Fix SADB_EALG_{3,}DESCBC values Fix ipcomp header handling in ipv4 IPCOMP Use xfrm_state_put in pfkey_msg2xfrm_state Implement proper IPIP tunnel handling for IPcomp Fix ipv4 ipcomp threshold calculation |
| 2.5.71 | IPSEC protocol module owner cleanup Order SPD using priority {esp,ah} --> {esp4,ah4} Include linux/slab.h where necessary Implement xfrm type module autoloading Zap killed policies from the flow cache properly Fix preempt race in flow_flush_cache Kill object argument from flow_cache_flush Proper percpu handling in flow cache Initialize flow key properly in decode_session |
| 2.5.72 | Fix xfrm_alloc_spi() always selecting minspi |
| 2.5.74 | Add encap_oa member to struct xfrm_encap_tmpl Close SADB_ADD race and add XFRM_MSG_UPDSA (SADB_UPDATE equivalent) split xfrm_state_replace + fixes [IPV6] Make ipsec tunnel work with ext hdrs |