=== Commit Notes ===
99d217b2 Remove --disable-def-auth configure argument
0d4ca79d Remove explicit setting of peer_id to false
cb70cf51 Remove NULL checks before calling free
2c8a9877 Align reliable_free with other free methods to accept NULL
0d5aab88 Inline function tls_get_peer_info
bbcada8a Avoid passing NULL to argv_printf_cat() in temp_file error case.
a4eeef17 Add function for common env setting of verify user/pass calls
a480eaae Ignore deprecation warning for daemon on macOS
14bd92b7 Fix compilation on pre-EKM mbedTLS libraries.
f0734e49 Simplify key material exporter backend API
6dc09d0d Implement generating data channel keys via EKM/RFC 5705
1e6e083e networking_iproute2: fix memory leak in net_iface_mtu_set()
c018fc00 Allow 'none' cipher being specified in --data-ciphers
3b04c34d Support X509 field list to be username
15d05243 Move openvpn specific key expansion into its own function
23e11e59 Fix redirecting of IPv4 default gateway if connecting over IPv6.
bfb28845 Added 'route_ipv6_metric_NN' environment variable for IPv6 route metric.
b68aa006 Speedup TCP remote hosts connections
a5409c0d Selectively reformat too long lines
0f44a908 compat/lz4: Update to v1.9.2
43cdb0c7 Improve error msg when all TAP adapters are in use 'or disabled'
e9e47f49 Fix update_time() and openvpn_gettimeofday() coexistence
d6720203 Alias ADAPTER_DOMAIN_SUFFIX to DOMAIN
66ad8727 Improve documentation of --username-as-common-name
70882f3e Set DNS Domain using iservice
7f7b0539 openvpnmsica: Simplify find_adapters() to void return
370395b3 netsh: Delete WINS servers on TUN close
dd754221 netsh: Clear existing IPv6 DNS servers before configuring new ones
6020e94b netsh: Specify interfaces by index rather than name
860a7bc7 Fix combination of --dev tap and --topology subnet across multiple platforms.
94cebf82 Add demo plugin that excercises "CLIENT_CONNECT" and "CLIENT_CONNECT_V2" paths
4dff2368 If IPv6 pool specification sets pool start to ::0 address, increment.
3ad86c25 Fix fatal error at switching remotes (#629)
6345cea8 build: Fix make distclean/distcheck
0b5141d8 sample-plugins: Partially autotoolize the sample-plugins build
81b6a7e7 Fix netbits setting (in TAP mode) for IPv6 on Windows.
b8625abb Allow --dhcp-option in config file when windows-driver is wintun
97ff6436 man: Improve --remote entry
eebeaa02 socks.c: fix alen for DOMAIN type addresses, bump up buffer sizes
fb94fbc3 msvc: better support for 32bit architecture
37aab49b Fix --show-gateway for IPv6 on NetBSD/i386.
a61c08a2 Handle NULL returns from calloc() in sample plugins.
8120e1ad man: Add missing --server-ipv6
50c7700d Fix description of --client-disconnect calling convention in manpage.
81f9bb3a Replace 'echo -n' with 'printf' in tests/t_lpback.sh
5b815eb4 Add a remark on dropping privileges when --mlock is used
aa346849 Fix handling of 'route remote_host' for IPv6 transport case.
505d5ad8 Fix best gateway selection over netlink
a4e0ac06 Fix TUNSETGROUP compatibility with very old Linux systems.
a09a2fad Fix error detection / abort in --inetd corner case.
5fd66510 Document that --push-remove is generally more suitable than --push-reset
b341b1c5 openvpnmsica: make adapter renaming non-fatal
f3f09541 In tap.c use DiInstallDevice to install the driver on a new adapter
6ffe64e3 Fix client NCP OCC fallback when server and client cipher are identical
136c5f01 Fix compilation with older mbed TLS versions (mbedtls_tls_prf_types undefined)
PR: 250743
Submitted by: Eric F. Crist (maintainer)
Approved by: Eric F. Crist (maintainer)
Changelog:
- Now parses public key sizes for rsa-sha2-256-cert-v01@openssh.com and rsa-sha2-512-cert-v01@openssh.com host key types.
- Flag ssh-rsa-cert-v01@openssh.com as a failure due to SHA-1 hash.
- Fixed bug in recommendation output which suppressed some algorithms inappropriately.
- Built-in policies now include CA key requirements (if certificates are in use).
- Lookup function (--lookup) now performs case-insensitive lookups of similar algorithms; credit Adam Russell.
- Migrated pre-made policies from external files to internal database.
- Split single 3,500 line script into many files (by class).
- Added setup.py support; credit Ganden Schaffner.
- Added 1 new cipher: des-cbc@ssh.com.
Changelog:
- Fix regression in 2020.79 which prevented connecting with some SSH
implementations. Increase MAX_PROPOSED_ALGO to 50, and print a log
message if the limit is hit. This fixes interoperability with sshj
library (used by PyCharm), and GoAnywhere.
Reported by Pirmin Walthert and Piotr Jurkiewicz
- Fix building with non-GCC compilers, reported by Kazuo Kuroi
- Fix potential long delay in dbclient, found by OSS Fuzz
- Fix null pointer dereference crash, found by OSS Fuzz
- libtommath now uses the same random source as Dropbear (in 2020.79
and 2020.80 used getrandom() separately)
- Some fuzzing improvements, start of a dbclient fuzzer
Tuesday, 27 October 2020.
Today KDE releases a bugfix update to KDE Plasma 5, versioned 5.20.2 Plasma
5.20 was released in October 2020 with many feature refinements and new modules
to complete the desktop experience.
This release adds a week’s worth of new translations and fixes from KDE’s
contributors. The bugfixes are typically small but important and include:
* Daemon: improve consistency of the lid behaviour.
* Fix bug: Some user profile fields won’t apply unless they all have unique
new values.
Full Changelog:
https://kde.org/announcements/plasma-5.20.1-5.20.2-changelog/
This is included in the distribution and referenced in the default
configuration that's installed, but hasn't been included in the package. Do
so now.
PR: 250669
Submitted by: Marius Halden <marius halden modirum com> (maintainer)
MFH: 2020Q4 (blanket: packaging fix)
Faster Nmap Scanning with Rust
Turns a 17 minutes Nmap scan into 19 seconds.
Find all open ports fast with RustScan, automatically pipe them into Nmap.
WWW: https://rustscan.github.io/RustScan
dropbear no longer supports DSS keys, use ed25519 instead. rc file needs to be updated.
currently starting dropbear fails with error:
% service dropbear start
...
Unknown key type 'dss'
...
Submitted by: waitman@waitman.net
PR: 250192
MFH: 2020Q4 (runtime fix)
Tuesday, 20 October 2020.
Today KDE releases a bugfix update to KDE Plasma 5, versioned 5.20.1. Plasma
5.20 was released in October 2020 with many feature refinements and new modules
to complete the desktop experience.
This release adds a week's worth of new translations and fixes from KDE's
contributors. The bugfixes are typically small but important and include:
* KSysGuard: Divide network speeds by 2 to match reality.
* Powerdevil: Ignore players from KDE Connect when suspending.
* Bluedevil kcm: Set sane default size.
Full Changelog:
https://kde.org/announcements/plasma-5.20.0-5.20.1-changelog
Danilo G. Baio
Muhammad Moinur Rahman
Timur I. Bakeyev
Mikael Urankar
Tobias C. Berner
Dima Panov
Matthias Andree
Piotr Kubaj
Ryan Steinmetz
Kurt Jaeger
Fernando Apesteguía
Mark Felder
Jan Beich
Rene Ladan
Danilo Egea Gondolfo
Yuri Victorovich
Kirill Ponomarev
Kyle Evans
Cy Schubert
TAKATSU Tomonari
Alexey Dokuchaev
Mikhail Teterin
Li-Wen Hsu
Jason E. Hale
Luca Pizzamiglio
Sunpoet Po-Chuan Hsieh
Koichiro Iwao
Torsten Zuehlsdorff