summaryrefslogtreecommitdiff
path: root/Changes.rst
diff options
context:
space:
mode:
authorJörg Frings-Fürst <debian@jff.email>2018-07-29 14:11:02 +0200
committerJörg Frings-Fürst <debian@jff.email>2018-07-29 14:11:02 +0200
commit64639e6dd78c89be61bbffeefcbd7a8d1e38178f (patch)
tree828e090fe91751afd157fb1ceb48c153dcb6568b /Changes.rst
parent3408a277eb3293c0c29d50c66b42727ad31181aa (diff)
parent53de4f8356a1c5d5b2f0903499087adcc8854c57 (diff)
Merge branch 'feature/upstream' into develop
Diffstat (limited to 'Changes.rst')
-rw-r--r--Changes.rst26
1 files changed, 26 insertions, 0 deletions
diff --git a/Changes.rst b/Changes.rst
index 4168d62..b8ed5ce 100644
--- a/Changes.rst
+++ b/Changes.rst
@@ -320,6 +320,32 @@ Maintainer-visible changes
use -std=gnu99 in CFLAGS. This is known to be needed when doing
i386/i686 builds on RHEL5.
+Version 2.4.6
+=============
+This is primarily a maintenance release with minor bugfixes and improvements,
+and one security relevant fix for the Windows Interactive Service.
+
+User visible changes
+--------------------
+- warn if the management interface is configured with a TCP port and
+ no password is set (because it might be possible to interfere with
+ OpenVPN operation by tricking other programs into connecting to the
+ management interface and inject unwanted commands)
+
+Bug fixes
+---------
+- CVE-2018-9336: fix potential double-free() in the Interactive Service
+ (Windows) on malformed input.
+
+- avoid possible integer overflow in wakeup computation (trac #922)
+
+- improve handling of incoming packet bursts for control channel data
+
+- fix compilation with older OpenSSL versions that were broken in 2.4.5
+
+- Windows + interactive Service: delete the IPv6 route to the "connected"
+ network on tun close
+
Version 2.4.5
=============