~ubuntu-branches/ubuntu/trusty/openvpn/trusty-security : changes

~ubuntu-branches/ubuntu/trusty/openvpn/trusty-security » Changes from revision 61

From Revision 21 to 2

Rev	Summary	Authors	Tags	Date
21	Fake sync (different orig.tar.gz). Fake sync (different orig.tar.gz).	Martin Pitt	2.1~rc7-4build1	15 years ago
20	* Merge with Debian unstable. Remaining Ubuntu changes: * Merge with Debian unstable. Remaining Ubuntu changes: - debian/openvpn.init.d: LSB compliant init script. (LP #134210) - debian/README.Debian: Added warning about max-locked-memory-limit. (LP #154696) - debian/config: Disable debconf question about creation of /dev/tun if /dev is managed by udev. * debian/openvpn.init.d: Fixed a couple of bugs in the init scritpt LSBification.	Martin Pitt	2.1~rc7-3ubuntu1	15 years ago
19	init.c: Do not attempt to verify the key file with openvpn-v... init.c: Do not attempt to verify the key file with openvpn-vulnkey if it is not accessible (any more). This happens when using the 'user', 'group', or 'chroot' options in multi-client mode, and the SSL key file thus becomes unreadable from the second time on. If the key file is not accessible at the very start, this is already handled anyway, so we can safely ignore this condition. (LP: #230208) Note that this is not an issue when using pre-shared keys (do_init_crypto_static(), since multi-client mode only works with TLS. However, we also check it here just to be on the safe side.	Martin Pitt	2.1~rc7-1ubuntu3.2	16 years ago
18	* SECURITY UPDATE: don't allow use of known vulnerable weak ... * SECURITY UPDATE: don't allow use of known vulnerable weak SSL/TLS and shared secret keys caused by Debian openssl bug * init.c: patch do_init_crypto_static() to use openvpn-vulnkey and do_init_crypto_tls() to use openssl-vulnkey * debian/control: Depends on libssl0.9.8 (>= 0.9.8g-4ubuntu3.1), openssl-blacklist and openvpn-blacklist * add critical debconf note * References CVE-2008-0166 http://www.ubuntu.com/usn/usn-612-1	Jamie Strandboge	2.1~rc7-1ubuntu3.1	16 years ago
17	* More init script LSB compliance. (LP: #134210) * More init script LSB compliance. (LP: #134210) * Added warning about max-locked-memory-limit to Readme.Debian. (LP: #154696)	Chuck Short	2.1~rc7-1ubuntu3	16 years ago
16	Made init script more lsb compliant. Made init script more lsb compliant.	Chuck Short	2.1~rc7-1ubuntu2	16 years ago
15	* New upstream version (LP: #157144). * New upstream version (LP: #157144). * Disable creation of tun, let udev handle it.	Chuck Short	2.1~rc7-1ubuntu1	16 years ago
14	* Upload to unstable. New upstream fixes: * Upload to unstable. New upstream fixes: - Bug with: Assertion failed at multi.c. (Closes: #411633) - Hangs with tcp clients goin down with new option: --connect-timeout. (Closes: #296834) * Use rm -f to remove PIDFILE, in case rm wants to ask. (Closes: #429932) * Updated Vietnamese debconf templates. (Closes: #427048) Thanks Clytie Siddall. * Added note on resolvconf use with openvpn. (Closes: #451319)	Alberto Gonzalez Ini...	2.1~rc4-2	16 years ago
13	Install /etc/openvpn/update-resolv-conf with correct permiss... Install /etc/openvpn/update-resolv-conf with correct permissions	Alberto Gonzalez Ini...	2.0.9-8	17 years ago
12	* Fixed init.d script to avoid running multiple instances of... * Fixed init.d script to avoid running multiple instances of the same VPN. Thanks Keith Kyzivat for pushing me into looking again into this issue. (Closes: #326080) * Included patch to README.Debian from Peter Rabbitson describing /etc/network/interfaces integration. (Closes: #413732) * Also included joeyh's suggestion on the previous subject. (Closes: 419797) * Avoid restarting a vpn instead of reloading it due to wrong detection of 'user' option in init.d script. Thanks Josip Rodin. (Closes: 403503) * Added Russian debconf translation. (Closes: #414088) Thanks Yuriy Talakan. * Built against liblzo2 instead of liblzo. (Closes: #423366)	Alberto Gonzalez Ini...	2.0.9-6	17 years ago
11	Added Galician debconf translation. (Closes: #412492) Added Galician debconf translation. (Closes: #412492) Thanks Jacobo Tarrio	Alberto Gonzalez Ini...	2.0.9-5	17 years ago
10	* Updated Spanish debconf translation. (Closes: #393796) * Updated Spanish debconf translation. (Closes: #393796) * Updated German debconf translation. (Closes: #397019) * Updated Japanese debconf translation. (Closes: #392627) * Added Italian debconf translation. (Closes: #398050) * Added Portuguese debconf translation. (Closes: #400685)	Alberto Gonzalez Ini...	2.0.9-2	17 years ago
9	* New upstream release. No changes in NIX source code. New upstream release. No changes in NIX source code. Updating to avoid 'New upstream, blah, blah'. debian/control: Fixed spelling error in description (Closes: #390242) * debian/copyright: Updated project's homepage and author's email address. (Closes: #388466) * debian/copyright: Updated the FSF address. * Updated Dutch debconf translation. (Closes: #389982, 379802) Thanks Kurt De Bree * Updated Czech debconf translation. (Closes: #384755) Thanks Miroslav Kure	Alberto Gonzalez Ini...	2.0.9-1	17 years ago
8	* The 'Translators, translators, translators' release. * The 'Translators, translators, translators' release. * New upstream version. * Added Dutch debconf translation. (Closes: #370073) Thanks Kurt De Bree * Updated Danish debconf translation. (Closes: #369772, #376704) Thanks Claus Hindsgaul * Updated French debconf translation. (Closes: #373191) Thanks Michel Grentzinger	Alberto Gonzalez Ini...	2.0.7-1	17 years ago
7	* The "Mañana" Release. * The "Mañana" Release. * debian/control: Added Suggests: openssl (Closes: #368256) * debian/postinst: Run the init.d script with 'start' when doing a fresh install or stop2upgrade=true. (Closes: #366085, #338956) * Updated Czech debconf translation (Closes: #333989) Thanks Miroslav Kure. * Bumped Standards-Version to 3.7.2.0, no change. * debian/rules: Avoid compressing 'pkitool' (Closes: #354478) * debian/templates: Corrected typo on init scripts order change. (Closes: #351664) * Updated German debconf translation (Closes: #345853) Thanks Erik Schanze.	Alberto Gonzalez Ini...	2.0.6-2	18 years ago
6	* New upstream release. Urgency high due to security fix. * New upstream release. Urgency high due to security fix. - Disallow "setenv" to be pushed to clients from the server. (Closes: #360559)	Alberto Gonzalez Ini...	2.0.6-1	18 years ago
5	Rebuild for openssl 0.9.8 transition Rebuild for openssl 0.9.8 transition	Sebastian Dröge	2.0.5-1build1	18 years ago
4	* The [VAC] upload. Thanks Vorbis Gdynia for the free intern... * The [VAC] upload. Thanks Vorbis Gdynia for the free internet access :) * New upstream release (Closes: #323594) * Fixed use of backslash in username authentication. (Closes: #309787) * Fixes several DoS vulnerabilities: CAN-2005-2531 CAN-2005-2532 CAN-2005-2533 CAN-2005-2534. (Closes: #324167) * Changed group option from 'nobody' to 'nogroup' in all the example files... (Closes: #317987) * Included openvpn-plugin.h to allow building third party plugins. (Closes: #316139) * Stop openvpn's daemon later to allow some services stopping later to use it. Added debconf template to ask permission to make the change on older installations. (Closes: #312371) * Workaround to fix proper daemonize when 'log' option is used. (Closes: #309944) Thanks Jason Lunz for the patch. * Modified output of init.d script to make it more friendly when passphrase for a tunnel certificate is asked. Thanks Pavel Vávra for the patch.	Alberto Gonzalez Ini...	2.0.2-1	18 years ago
3	* The 'Three Wise Men' release. * The 'Three Wise Men' release. * New upstream release. * Update README.Debian with comments on changed string remapping. Thanks ron@debian.org for noting this first. (Closes: #288669)	Alberto Gonzalez Ini...	1.99+2.rc6-1	19 years ago
2	* Included Catalan debconf templates. (Closes: #248750) * Included Catalan debconf templates. (Closes: #248750) Thanks Aleix Badia i Bosch. * Added debconf question on whether the daemon should be stopped at the begining of and upgrade or not. Thus being more reliable on remote upgrades. (Closes: #250558)	Alberto Gonzalez Ini...	1.6.0-3	19 years ago