diff options
| -rw-r--r-- | ChangeLog | 61 | ||||
| -rw-r--r-- | Changes.rst | 42 | ||||
| -rw-r--r-- | version.m4 | 4 |
3 files changed, 105 insertions, 2 deletions
@@ -1,6 +1,67 @@ OpenVPN Change Log Copyright (C) 2002-2018 OpenVPN Inc <sales@openvpn.net> +2019.10.30 -- Version 2.4.8 +Antonio Quartulli (1): + mbedtls: fix segfault by calling mbedtls_cipher_free() in cipher_ctx_free() + +Arne Schwabe (1): + Remove -no-cpp-precomp flag from Darwin builds + +David Sommerseth (3): + cleanup: Remove RPM openvpn.spec build approach + docs: Update INSTALL + build: Package missing mock_msg.h + +Gert Doering (4): + repair windows builds (2.4) + Increase listen() backlog queue to 32 + Force combinationation of --socks-proxy and --proto UDP to use IPv4. + Fix IPv6 routes on tap interfaces on OpenSolaris/OpenIndiana + +Gisle Vanem (1): + Wrong FILETYPE in .rc files + +Hilko Bengen (1): + Do not set pkcs11-helper 'safe fork mode' + +Ilya Shipitsin (2): + travis-ci: add "linux-ppc64le" to build matrix, change trusty image to xenial, update osx to xcode9.4 and modernize brew management + travis-ci: fix osx builds + +Kyle Evans (1): + tests/t_lpback.sh: Switch sed(1) to POSIX-compatible regex. + +Lev Stipakov (1): + Fix various compiler warnings + +Matthias Andree (1): + Fix regression, reinstate LibreSSL support. + +Michal Soltys (1): + man: correct the description of --capath and --crl-verify regarding CRLs + +Mykola Baibuz (1): + Fix typo in NTLM proxy debug message + +Richard Bonhomme (1): + Ignore --pull-filter for --mode server + +Rosen Penev (1): + openssl: Fix compilation without deprecated OpenSSL 1.1 APIs + +Selva Nair (3): + Better error message when script fails due to script-security setting + Correct the return value of cryptoapi RSA signature callbacks + Handle PSS padding in cryptoapicert + +Steffan Karger (1): + cmocka: use relative paths + +Thomas Quinot (1): + Fix documentation of tls-verify script argument + + 2019.02.18 -- Version 2.4.7 Adam Ciarcin?ski (1): Fix subnet topology on NetBSD (2.4). diff --git a/Changes.rst b/Changes.rst index 21960f5..65d1eb3 100644 --- a/Changes.rst +++ b/Changes.rst @@ -321,6 +321,48 @@ Maintainer-visible changes i386/i686 builds on RHEL5. +Version 2.4.8 +============= +This is primarily a maintenance release with minor bugfixes and improvements. + +New features +------------ +- Support compiling with OpenSSL 1.1 without deprecated APIs + +- handle PSS padding in cryptoapicert (necessary for TLS >= 1.2) + + +User visible changes +-------------------- +- do not abort when hitting the combination of "--pull-filter" and + "--mode server" (this got hit when starting OpenVPN servers using + the windows GUI which installs a pull-filter to force ip-win32) + +- increase listen() backlog queue to 32 (improve response behaviour + on openvpn servers using TCP that get portscanned) + +- fix and enhance documentation (INSTALL, man page, ...) + + +Bug fixes +--------- +- the combination "IPv6 and proto UDP and SOCKS proxy" did not work - as + a workaround, force IPv4 in this case until a full implementation for + IPv6-UDP-SOCKS can be made. + +- fix IPv6 routes on tap interfaces on OpenSolaris/OpenIndiana + +- fix building with LibreSSL + +- do not set pkcs11-helper 'safe fork mode' (should fix PIN querying in + systemd environments) + +- repair windows builds + +- repair Darwin builds (remove -no-cpp-precomp flag) + + + Version 2.4.7 ============= This is primarily a maintenance release with minor bugfixes and improvements. @@ -3,12 +3,12 @@ define([PRODUCT_NAME], [OpenVPN]) define([PRODUCT_TARNAME], [openvpn]) define([PRODUCT_VERSION_MAJOR], [2]) define([PRODUCT_VERSION_MINOR], [4]) -define([PRODUCT_VERSION_PATCH], [.7]) +define([PRODUCT_VERSION_PATCH], [.8]) m4_append([PRODUCT_VERSION], [PRODUCT_VERSION_MAJOR]) m4_append([PRODUCT_VERSION], [PRODUCT_VERSION_MINOR], [[.]]) m4_append([PRODUCT_VERSION], [PRODUCT_VERSION_PATCH], [[]]) define([PRODUCT_BUGREPORT], [openvpn-users@lists.sourceforge.net]) -define([PRODUCT_VERSION_RESOURCE], [2,4,7,0]) +define([PRODUCT_VERSION_RESOURCE], [2,4,8,0]) dnl define the TAP version define([PRODUCT_TAP_WIN_COMPONENT_ID], [tap0901]) define([PRODUCT_TAP_WIN_MIN_MAJOR], [9]) |