Browse code

Preparing release of v2.3.12

Signed-off-by: David Sommerseth <davids@openvpn.net>

David Sommerseth authored on 2016/08/23 22:08:23
Showing 3 changed files
... ...
@@ -1,6 +1,52 @@
1 1
 OpenVPN Change Log
2 2
 Copyright (C) 2002-2015 OpenVPN Technologies, Inc. <sales@openvpn.net>
3 3
 
4
+2016.08.23 -- Version 2.3.12
5
+Arne Schwabe (2):
6
+      Complete push-peer-info documentation and allow IV_PLAT_VER for other platforms than Windows if the client UI supplies it.
7
+      Move ASSERT so external-key with OpenSSL works again
8
+
9
+David Sommerseth (3):
10
+      Only build and run cmocka unit tests if its submodule is initialized
11
+      Another fix related to unit test framework
12
+      Remove NOP function and callers
13
+
14
+Dorian Harmans (1):
15
+      Add CHACHA20-POLY1305 ciphersuite IANA name translations.
16
+
17
+Ivo Manca (1):
18
+      Plug memory leak in mbedTLS backend
19
+
20
+Jeffrey Cutter (1):
21
+      Update contrib/pull-resolv-conf/client.up for no DOMAIN
22
+
23
+Jens Neuhalfen (2):
24
+      Add unit testing support via cmocka
25
+      Add a test for auth-pam searchandreplace
26
+
27
+Josh Cepek (1):
28
+      Push an IPv6 CIDR mask used by the server, not the pool's size
29
+
30
+Leon Klingele (1):
31
+      Add link to bug tracker
32
+
33
+Samuli Seppänen (2):
34
+      Update CONTRIBUTING.rst to allow GitHub PRs for code review purposes
35
+      Clarify the fact that build instructions in README are for release tarballs
36
+
37
+Selva Nair (4):
38
+      Make error non-fatal while deleting address using netsh
39
+      Make block-outside-dns work with persist-tun
40
+      Ignore SIGUSR1/SIGHUP during exit notification
41
+      Promptly close the netcmd_semaphore handle after use
42
+
43
+Steffan Karger (4):
44
+      Fix polarssl / mbedtls builds
45
+      Don't limit max incoming message size based on c2->frame
46
+      Fix '--cipher none --cipher' crash
47
+      Discourage using 64-bit block ciphers
48
+
49
+
4 50
 2016.05.09 -- Version 2.3.11
5 51
 James Yonan (1):
6 52
       Fixed port-share bug with DoS potential
... ...
@@ -100,6 +100,21 @@ Behavioral changes
100 100
 - Do not randomize resolving of IP addresses in getaddr()
101 101
 
102 102
 
103
+Version 2.3.12
104
+==============
105
+
106
+Security changes
107
+----------------
108
+
109
+- Deprecation of ciphers using less than 128-bits cipher blocks
110
+
111
+  It is highly recommended to avoid using ciphers listed in the new
112
+  deprecated section of --show-ciphers.  These ciphers are no longer
113
+  considered safe to use.  If you cannot migrate away from these
114
+  ciphers currently, it is strongly recommended to start using
115
+  --reneg-bytes with a value less than 64MB.
116
+
117
+
103 118
 Version 2.3.11
104 119
 ==============
105 120
 
... ...
@@ -1,9 +1,9 @@
1 1
 dnl define the OpenVPN version
2 2
 define([PRODUCT_NAME], [OpenVPN])
3 3
 define([PRODUCT_TARNAME], [openvpn])
4
-define([PRODUCT_VERSION], [2.3.11])
4
+define([PRODUCT_VERSION], [2.3.12])
5 5
 define([PRODUCT_BUGREPORT], [openvpn-users@lists.sourceforge.net])
6
-define([PRODUCT_VERSION_RESOURCE], [2,3,11,0])
6
+define([PRODUCT_VERSION_RESOURCE], [2,3,12,0])
7 7
 dnl define the TAP version
8 8
 define([PRODUCT_TAP_WIN_COMPONENT_ID], [tap0901])
9 9
 define([PRODUCT_TAP_WIN_MIN_MAJOR], [9])