# changelog

author: Peter Robinson <pbrobinson@fedoraproject.org> 3.5.25.3-12
changelog:
  - Remove autoconf requirement, it's not needed even for aarch64
    it's handled in the %configure macro


author: David Sommerseth <dazo@eurephia.org> - 2.4.1-1
changelog:
  - Updating to upstream release, v2.4.1
  - Removed no-functional ./configure options
  - Use upstream tmfiles.d/openvpn
  - Package newer openvpn-client/server@.service unit files
  - Fedora EPEL exception: Re-introduce --tls-remote feature
  - Package management-notes.txt, describing the management interface


author: David Sommerseth <dazo@eurephia.org> - 2.4.1-2
changelog:
  - Splitting out -devel files into a separate package
  - Removed several contrib and sample files which makes is not
    strictly needed in this package.
  - Use systemd-rpm macros (rhbz#850257)
  - Updated openvpn@.service to use Type=notify instead of Type=forking (rhbz#1435831)
    BEWARE: openvpn@.service is DEPRECATED.
  - Added README.systemd describing new systemd unit files (openvpn-client/server@.service)
  - Lots of packaging cleanups
  - build: Enable tests runs by default, long running tests can
    be disabled with "--without tests_long"
  - build: Removed defined %{plugins} macro not in use


author: David Sommerseth <dazo@eurephia.org> - 2.4.2-2
changelog:
  - Install and take ownership of /run/openvpn-{client,server} (rhbz#1444601)
  - Install and take ownership of /var/lib/openvpn (rhbz#922786)
  - Re-enable --enable-x509-alt-username (rhbz#1443942)


author: David Sommerseth <dazo@eurephia.org> - 2.4.3-1
changelog:
  - Updating to upstream openvpn-2.4.3
  - Fix remotely-triggerable ASSERT() on malformed IPv6 packet {CVE-2017-7508}
  - Prevent two kinds of stack buffer OOB reads and a crash for invalid input data {CVE-2017-7520}
  - Fix potential double-free in --x509-alt-username {CVE-2017-7521}
  - Fix remote-triggerable memory leaks {CVE-2017-7521}
  - Ensure OpenVPN systemd services are restarted upon upgrades
  - Verify PGP signature of source tarball as part of package building


author: David Sommerseth <dazo@eurephia.org> - 2.4.4-1
changelog:
  - Update to latest upstream release
  - Includes fix for possible stack overflow if --key-method 1 is used {CVE-2017-12166}
  - Build against Fedora EPEL lz4 compression library
  - Build with long running test cases
  - Use %{name} instead of the openvpn string in a few directory paths


