look: Don't cause loading of iptables kernel modules (rhbz#954249)
update changes
pluto: prevent curl from sending confusing signals crashing pluto (lsbz#128)

This would manifest itself when you need a CRL to bring up the tunnel,
but the CRL fetch location is on the other end of the tunnel (or otherwise
resolving fails)

See also: https://bugzilla.redhat.com/show_bug.cgi?id=539809

	libcurl built without an asynchronous resolver library uses
	alarm() to time out DNS lookups. When a timeout occurs,
	this causes libcurl to jump from the signal handler back
	into the library with a sigsetjmp, which effectively
	causes libcurl to continue running within the signal
	handler. This is non-portable and could cause problems on
	some platforms. A discussion on the problem is available at
	http://curl.haxx.se/mail/lib-2008-09/0197.html

	Also, alarm() provides timeout resolution only to the nearest
	second. alarm ought to be replaced by setitimer on systems that
	support it.

Note this seems to have happened in Fedora, but not yet in RHEL6
updated changes
updated changes
fix #128 entry in CHANGES
start changes for 3.6