Changes between Version 32 and Version 33 of ChangesInOpenvpn23

Timestamp:

06/21/17 10:50:24 (7 years ago)

Author:

Samuli Seppänen

Comment:

Add changelog for OpenVPN 2.3.17

ChangesInOpenvpn23

@@ -2 +2 @@
 
 = Overview of changes in OpenVPN v2.3 =
+
+== OpenVPN 2.3.17 ==
+
+{{{
+David Sommerseth (2):
+      backport: Ignore auth-nocache for auth-user-pass if auth-token is pushed
+      auth-token with auth-nocache fix broke --disable-crypto builds
+
+Gert Doering (3):
+      Fix potential 1-byte overread in TCP option parsing.
+      Fix remotely-triggerable ASSERT() on malformed IPv6 packet.
+      Preparing for release v2.3.17 (ChangeLog, version.m4, Changes.rst)
+
+Guido Vranken (6):
+      refactor my_strupr
+      Fix 2 memory leaks in proxy authentication routine
+      Fix memory leak in add_option() for option 'connection'
+      Ensure option array p[] is always NULL-terminated
+      Fix a null-pointer dereference in establish_http_proxy_passthru()
+      Prevent two kinds of stack buffer OOB reads and a crash for invalid input data
+
+Jérémie Courrèges-Anglas (2):
+      Fix an unaligned access on OpenBSD/sparc64
+      Missing include for socket-flags TCP_NODELAY on OpenBSD
+
+Steffan Karger (4):
+      openssl: fix overflow check for long --tls-cipher option
+      Fix remote-triggerable memory leaks (CVE-2017-7521)
+      Restrict --x509-alt-username extension types
+      Fix potential double-free in --x509-alt-username (CVE-2017-7521)
+}}}
 
 == OpenVPN 2.3.16 ==