IKEv1 changes

[thirdparty/strongswan.git] / NEWS

diff --git a/NEWS b/NEWS
index 3404afa0323b1c47c143b8d1281664fb2618b0b5..10d4f0f13a00d004300502a1a8bfac8899ec4557 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -8,6 +8,17 @@ strongswan-4.1.1
   compared to properly detect retransmissions and incoming retransmits are
   detected even if the IKE_SA is blocked (e.g. doing OCSP fetches).
 
+- Added the configuration options --enable-nat-transport which enables
+  the potentially insecure NAT traversal for IPsec transport mode and
+  --disable-vendor-id which disables the sending of the strongSwan
+  vendor ID.
+
+- Fixed a long-standing bug in the pluto IKEv1 daemon which caused
+  a segmentation fault if a malformed payload was detected in the
+  IKE MR2 message and pluto tried to send an encrypted notification
+  message.
+
+
 strongswan-4.1.0
 ----------------