Preparing release 2.5.6

version.m4, ChangeLog, Changes.rst

Signed-off-by: Gert Doering <gert@greenie.muc.de>

diff --git a/ChangeLog b/ChangeLog
index df9eb373b230908315de9ea31df5e17ab577ad99..edc0da3c6de41cdfc64480820fc156f2baf0b3f8 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,6 +1,41 @@
 OpenVPN Change Log
 Copyright (C) 2002-2022 OpenVPN Inc <sales@openvpn.net>
 
+2022.03.16 -- Version 2.5.6
+
+Antonio Quartulli (4):
+      GitHub Actions: update script to same version as master
+      update copyright year to 2022
+      keyingmaterialexporter.c: include strings.h
+      remove unused sitnl.h file
+
+David Sommerseth (2):
+      sample-plugin: New plugin for testing multiple auth plugins
+      plug-ins: Disallow multiple deferred authentication plug-ins
+
+Frank Lichtenheld (2):
+      doc/Makefile: rebuild rst docs if input files change
+      doc/options: clean up documentation for --proto and related options
+
+Gert Doering (4):
+      fix Changes.rst errors in 2.5.3 and 2.5.5 announcement
+      Repair --inactive with 'bytes' argument larger 2Gbytes.
+      Fix --mtu-disc maybe|yes on Linux.
+      Preparing release 2.5.6
+
+Ilya Shipitsin (1):
+      CI: github actions: keep "pdb" in artifacts
+
+Lev Stipakov (7):
+      auth_token.c: add NULL initialization
+      vcpkg-ports/pkcs11-helper: bump to release 1.28
+      vcpkg-ports/pkcs11-helper: indicate OpenSSL EC support
+      msvc: cleanup
+      vcpkg: link lzo statically
+      vcpkg-ports/pkcs11-helper: adapt to new upstream URL
+      vcpkg-ports: add openssl 1.1.1n
+
+
 2021.12.14 -- Version 2.5.5
 
 Adrian (1):

diff --git a/Changes.rst b/Changes.rst
index 4e4f20181fc7d9d569b137fa23c4a81677047291..45d2c3f39e4ab204d5845c235e7dac8891fd7c9f 100644 (file)
--- a/Changes.rst
+++ b/Changes.rst
@@ -1,3 +1,72 @@
+Overview of changes in 2.5.6
+============================
+
+User-visible Changes
+--------------------
+- update copyright year to 2022
+
+New features
+------------
+- new plugin (sample-plugin/defer/multi-auth.c) to help testing with
+  multiple parallel plugins that succeed/fail in direct/deferred mode
+
+- various build improvements (github actions etc)
+
+- upgrade pkcs11-helper to release 1.28.4
+
+Bugfixes
+--------
+- CVE-2022-0547
+  see https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements
+
+  If openvpn is configured with multiple authentication plugins and
+  more than one plugin tries to do deferred authentication, the result
+  is not well-defined - creating a possible authentication bypass.
+
+  In this situation the server process will now abort itself with a clear
+  log message.  Only one plugin is allowed to do deferred authentication.
+
+- Fix "--mtu-disc maybe|yes" on Linux
+
+  Due to configure/syshead.h/#ifdef confusion, the code in question was
+  not compiled-in since a long time.  Fixed.  Trac: #1452
+
+- Fix $common_name variable passed to scripts when username-as-common-name
+  is in effect.
+
+  This was not consistently set - sometimes, OpenVPN exported the username,
+  sometimes the common name from the client cert.  Fixed.  Trac: #1434
+
+- Fix potential memory leaks in add_route() and add_route_ipv6().
+
+- Apply connect-retry backoff only to one side of the connection in
+  p2p mode.  Without that fix/enhancement, two sides could end up
+  only sending packets when the other end is not ready.  Trac: #1010, #1384
+
+- remove unused sitnl.h file
+
+- clean up msvc build files, remove unused MSVC build .bat files
+
+- repair "--inactive" handling with a 'bytes' parameter larger than 2 Gbytes
+
+  due to integer overflow, this ended up being "0" on Linux, but on
+  Windows with MSVC it ends up being "always 2 Gbyte", both not doing
+  what is requested. Trac: #1448
+
+- repair handling of EC certificates on Windows with pkcs11-helper
+
+  (wrong compile-time defines for OpenSSL 1.1.1)
+
+Documentation
+-------------
+- documentation improvements related to DynDNS.  Trac: #1417
+
+- clean up documentation for --proto and related options
+
+- rebuild rst docs if input files change (proper dependency handling)
+
+
+
 Overview of changes in 2.5.5
 ============================
 

diff --git a/version.m4 b/version.m4
index a94177ea380a0a629c9cb03d83483cebcacd91d5..124a50aa2e07e40f161edbd6d0cb99ac15ed0972 100644 (file)
--- a/version.m4
+++ b/version.m4
@@ -3,12 +3,12 @@ define([PRODUCT_NAME], [OpenVPN])
 define([PRODUCT_TARNAME], [openvpn])
 define([PRODUCT_VERSION_MAJOR], [2])
 define([PRODUCT_VERSION_MINOR], [5])
-define([PRODUCT_VERSION_PATCH], [.5])
+define([PRODUCT_VERSION_PATCH], [.6])
 m4_append([PRODUCT_VERSION], [PRODUCT_VERSION_MAJOR])
 m4_append([PRODUCT_VERSION], [PRODUCT_VERSION_MINOR], [[.]])
 m4_append([PRODUCT_VERSION], [PRODUCT_VERSION_PATCH], [[]])
 define([PRODUCT_BUGREPORT], [openvpn-users@lists.sourceforge.net])
-define([PRODUCT_VERSION_RESOURCE], [2,5,5,0])
+define([PRODUCT_VERSION_RESOURCE], [2,5,6,0])
 dnl define the TAP version
 define([PRODUCT_TAP_WIN_COMPONENT_ID], [tap0901])
 define([PRODUCT_TAP_WIN_MIN_MAJOR], [9])