From 3b4f7d922afdfe18a2d9a2c70ebe7073981b7224 Mon Sep 17 00:00:00 2001
From: Andreas Steffen <andreas.steffen@strongswan.org>
Date: Tue, 3 Apr 2007 12:41:37 +0000
Subject: [PATCH] IKEv1 changes

---
 NEWS | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/NEWS b/NEWS
index 3404afa03..10d4f0f13 100644
--- a/NEWS
+++ b/NEWS
@@ -8,6 +8,17 @@ strongswan-4.1.1
   compared to properly detect retransmissions and incoming retransmits are
   detected even if the IKE_SA is blocked (e.g. doing OCSP fetches).
 
+- Added the configuration options --enable-nat-transport which enables
+  the potentially insecure NAT traversal for IPsec transport mode and
+  --disable-vendor-id which disables the sending of the strongSwan
+  vendor ID.
+
+- Fixed a long-standing bug in the pluto IKEv1 daemon which caused
+  a segmentation fault if a malformed payload was detected in the
+  IKE MR2 message and pluto tried to send an encrypted notification
+  message.
+
+
 strongswan-4.1.0
 ----------------