From fbd567ff8cd8acfccb81f9531eee7333f6013b185cef2c17cd32c8d9bcb59f89 Mon Sep 17 00:00:00 2001 From: Nirmoy Das Date: Tue, 6 Jun 2017 13:12:31 +0000 Subject: [PATCH] - Update tp 2.4.2 - auth-token: Ensure tokens are always wiped on de-auth - Make --cipher/--auth none more explicit on the risks - Use SHA256 for the internal digest, instead of MD5 - Deprecate --ns-cert-type - Deprecate --no-iv - Support --block-outside-dns on multiple tunnels - Limit --reneg-bytes to 64MB when using small block ciphers - Fix --tls-version-max in mbed TLS builds Details changelogs are avilable in https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24 [*0001-preform-deferred-authentication-in-the-background.patch *openvpn-2.3.x-fixed-multiple-low-severity-issues.patch *openvpn-fips140-2.3.2.patch] OBS-URL: https://build.opensuse.org/package/show/network:vpn/openvpn?expand=0&rev=118 --- openvpn.changes | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/openvpn.changes b/openvpn.changes index 1b590a8..c2a253d 100644 --- a/openvpn.changes +++ b/openvpn.changes @@ -1,3 +1,21 @@ +------------------------------------------------------------------- +Tue Jun 6 14:59:29 CEST 2017 - ndas@suse.de + +- Update tp 2.4.2 + - auth-token: Ensure tokens are always wiped on de-auth + - Make --cipher/--auth none more explicit on the risks + - Use SHA256 for the internal digest, instead of MD5 + - Deprecate --ns-cert-type + - Deprecate --no-iv + - Support --block-outside-dns on multiple tunnels + - Limit --reneg-bytes to 64MB when using small block ciphers + - Fix --tls-version-max in mbed TLS builds + Details changelogs are avilable in + https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24 + [*0001-preform-deferred-authentication-in-the-background.patch + *openvpn-2.3.x-fixed-multiple-low-severity-issues.patch + *openvpn-fips140-2.3.2.patch] + ------------------------------------------------------------------- Fri Apr 21 14:55:09 CEST 2017 - ndas@suse.de