preparing release v2.4.8 (ChangeLog, version.m4, Changes.rst)

Signed-off-by: Gert Doering <gert@greenie.muc.de>

diff --git a/ChangeLog b/ChangeLog
index fc9963a03964dfb279126931b7babdf4e499d4f4..8d16faad5ba8552240045f2fdcca230a13909099 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,6 +1,67 @@
 OpenVPN Change Log
 Copyright (C) 2002-2018 OpenVPN Inc <sales@openvpn.net>
 
+2019.10.30 -- Version 2.4.8
+Antonio Quartulli (1):
+      mbedtls: fix segfault by calling mbedtls_cipher_free() in cipher_ctx_free()
+
+Arne Schwabe (1):
+      Remove -no-cpp-precomp flag from Darwin builds
+
+David Sommerseth (3):
+      cleanup: Remove RPM openvpn.spec build approach
+      docs: Update INSTALL
+      build: Package missing mock_msg.h
+
+Gert Doering (4):
+      repair windows builds (2.4)
+      Increase listen() backlog queue to 32
+      Force combinationation of --socks-proxy and --proto UDP to use IPv4.
+      Fix IPv6 routes on tap interfaces on OpenSolaris/OpenIndiana
+
+Gisle Vanem (1):
+      Wrong FILETYPE in .rc files
+
+Hilko Bengen (1):
+      Do not set pkcs11-helper 'safe fork mode'
+
+Ilya Shipitsin (2):
+      travis-ci: add "linux-ppc64le" to build matrix, change trusty image to xenial, update osx to xcode9.4 and modernize brew management
+      travis-ci: fix osx builds
+
+Kyle Evans (1):
+      tests/t_lpback.sh: Switch sed(1) to POSIX-compatible regex.
+
+Lev Stipakov (1):
+      Fix various compiler warnings
+
+Matthias Andree (1):
+      Fix regression, reinstate LibreSSL support.
+
+Michal Soltys (1):
+      man: correct the description of --capath and --crl-verify regarding CRLs
+
+Mykola Baibuz (1):
+      Fix typo in NTLM proxy debug message
+
+Richard Bonhomme (1):
+      Ignore --pull-filter for --mode server
+
+Rosen Penev (1):
+      openssl: Fix compilation without deprecated OpenSSL 1.1 APIs
+
+Selva Nair (3):
+      Better error message when script fails due to script-security setting
+      Correct the return value of cryptoapi RSA signature callbacks
+      Handle PSS padding in cryptoapicert
+
+Steffan Karger (1):
+      cmocka: use relative paths
+
+Thomas Quinot (1):
+      Fix documentation of tls-verify script argument
+
+
 2019.02.18 -- Version 2.4.7
 Adam Ciarcin?ski (1):
       Fix subnet topology on NetBSD (2.4).

diff --git a/Changes.rst b/Changes.rst
index 21960f5a1c9e3ef402bea7543eb151ff2e7bbef2..65d1eb38a2ebb1e113af1038a60bb77079785719 100644 (file)
--- a/Changes.rst
+++ b/Changes.rst
@@ -321,6 +321,48 @@ Maintainer-visible changes
   i386/i686 builds on RHEL5.
 
 
+Version 2.4.8
+=============
+This is primarily a maintenance release with minor bugfixes and improvements.
+
+New features
+------------
+- Support compiling with OpenSSL 1.1 without deprecated APIs
+
+- handle PSS padding in cryptoapicert (necessary for TLS >= 1.2)
+
+
+User visible changes
+--------------------
+- do not abort when hitting the combination of "--pull-filter" and
+  "--mode server" (this got hit when starting OpenVPN servers using
+  the windows GUI which installs a pull-filter to force ip-win32)
+
+- increase listen() backlog queue to 32  (improve response behaviour
+  on openvpn servers using TCP that get portscanned)
+
+- fix and enhance documentation (INSTALL, man page, ...)
+
+
+Bug fixes
+---------
+- the combination "IPv6 and proto UDP and SOCKS proxy" did not work - as
+  a workaround, force IPv4 in this case until a full implementation for
+  IPv6-UDP-SOCKS can be made.
+
+- fix IPv6 routes on tap interfaces on OpenSolaris/OpenIndiana
+
+- fix building with LibreSSL
+
+- do not set pkcs11-helper 'safe fork mode' (should fix PIN querying in
+  systemd environments)
+
+- repair windows builds
+
+- repair Darwin builds (remove -no-cpp-precomp flag)
+
+
+
 Version 2.4.7
 =============
 This is primarily a maintenance release with minor bugfixes and improvements.

diff --git a/version.m4 b/version.m4
index 9628a3d1c3eca69c0a2f623da7b9ca4e8eb74b34..a6fa16221607e0e28c9f7be4b5c6b89f985e8370 100644 (file)
--- a/version.m4
+++ b/version.m4
@@ -3,12 +3,12 @@ define([PRODUCT_NAME], [OpenVPN])
 define([PRODUCT_TARNAME], [openvpn])
 define([PRODUCT_VERSION_MAJOR], [2])
 define([PRODUCT_VERSION_MINOR], [4])
-define([PRODUCT_VERSION_PATCH], [.7])
+define([PRODUCT_VERSION_PATCH], [.8])
 m4_append([PRODUCT_VERSION], [PRODUCT_VERSION_MAJOR])
 m4_append([PRODUCT_VERSION], [PRODUCT_VERSION_MINOR], [[.]])
 m4_append([PRODUCT_VERSION], [PRODUCT_VERSION_PATCH], [[]])
 define([PRODUCT_BUGREPORT], [openvpn-users@lists.sourceforge.net])
-define([PRODUCT_VERSION_RESOURCE], [2,4,7,0])
+define([PRODUCT_VERSION_RESOURCE], [2,4,8,0])
 dnl define the TAP version
 define([PRODUCT_TAP_WIN_COMPONENT_ID], [tap0901])
 define([PRODUCT_TAP_WIN_MIN_MAJOR], [9])