[ubuntu/kinetic-proposed] openvpn 2.6.0~git20220518+dco-2ubuntu1 (Accepted)

[Gianfranco Costamagna]

openvpn (2.6.0~git20220518+dco-2ubuntu1) kinetic; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - d/control: Demote easy-rsa to Suggests (universe package).
    - debian/openvpn at .service: Add '--script-security 2' similar to what
      got added to debian/openvpn.init.d ages ago (LP #1454725)
  * Drop changes fixed in new upstream release:
    - d/p/openvpn-fips-2.4.patch: Allow MD5 for PRF in FIPS mode openssl.
    - d/p/OpenSSL3.patch: work around the deprecated algorithm mismatch between
      the OpenSSL3 branch and the OpenVPN 2.5 branch (LP #1945980)
    - debian/patches/CVE-2022-0547.patch: disallow multiple deferred
      authentication plug-ins in doc/man-sections/plugin-options.rst,
      src/openvpn/plugin.c.

openvpn (2.6.0~git20220518+dco-2) unstable; urgency=medium

  * Add d/NEWS entry about the release notes and DCO (Closes: #1011372)

openvpn (2.6.0~git20220518+dco-1) unstable; urgency=medium

  * New upstream version 2.6.0~git20220518+dco
  * Release to unstable
  * Revert "Build against OpenSSL 3.0", OpenSSL 3.0 has landed in unstable

openvpn (2.6.0~git20220510+dco-1) experimental; urgency=medium

  * New upstream version 2.6.0~git20220510+dco
  * Suggest openvpn-dco-dkms
  * Drop iproute2, linux builds use netlink
  * Limit libnl-genl-3-dev build-dep (for dco) to linux-any
  * Build against OpenSSL 3.0

openvpn (2.6.0~git20220317+dco-1) experimental; urgency=medium

  * New upstream version 2.6.0~git20220317+dco
    This is a snapshot of the upstream dco branch (data-channel offloading)

openvpn (2.5.6-1) unstable; urgency=high

  * New upstream version 2.5.6
    CVE-2022-0547 - Potential authentication by-pass with multiple deferred
    authentication plug-ins plug-ins (Closes: #1008015)

Date: Tue, 07 Jun 2022 11:51:28 +0200
Changed-By: Gianfranco Costamagna <locutusofborg at debian.org>
Maintainer: Bernhard Schmidt <berni at debian.org>
https://launchpad.net/ubuntu/+source/openvpn/2.6.0~git20220518+dco-2ubuntu1
-------------- next part --------------
Format: 1.8
Date: Tue, 07 Jun 2022 11:51:28 +0200
Source: openvpn
Architecture: source
Version: 2.6.0~git20220518+dco-2ubuntu1
Distribution: kinetic
Urgency: high
Maintainer: Bernhard Schmidt <berni at debian.org>
Changed-By: Gianfranco Costamagna <locutusofborg at debian.org>
Closes: 1008015 1011372
Changes:
 openvpn (2.6.0~git20220518+dco-2ubuntu1) kinetic; urgency=low
 .
   * Merge from Debian unstable. Remaining changes:
     - d/control: Demote easy-rsa to Suggests (universe package).
     - debian/openvpn at .service: Add '--script-security 2' similar to what
       got added to debian/openvpn.init.d ages ago (LP #1454725)
   * Drop changes fixed in new upstream release:
     - d/p/openvpn-fips-2.4.patch: Allow MD5 for PRF in FIPS mode openssl.
     - d/p/OpenSSL3.patch: work around the deprecated algorithm mismatch between
       the OpenSSL3 branch and the OpenVPN 2.5 branch (LP #1945980)
     - debian/patches/CVE-2022-0547.patch: disallow multiple deferred
       authentication plug-ins in doc/man-sections/plugin-options.rst,
       src/openvpn/plugin.c.
 .
 openvpn (2.6.0~git20220518+dco-2) unstable; urgency=medium
 .
   * Add d/NEWS entry about the release notes and DCO (Closes: #1011372)
 .
 openvpn (2.6.0~git20220518+dco-1) unstable; urgency=medium
 .
   * New upstream version 2.6.0~git20220518+dco
   * Release to unstable
   * Revert "Build against OpenSSL 3.0", OpenSSL 3.0 has landed in unstable
 .
 openvpn (2.6.0~git20220510+dco-1) experimental; urgency=medium
 .
   * New upstream version 2.6.0~git20220510+dco
   * Suggest openvpn-dco-dkms
   * Drop iproute2, linux builds use netlink
   * Limit libnl-genl-3-dev build-dep (for dco) to linux-any
   * Build against OpenSSL 3.0
 .
 openvpn (2.6.0~git20220317+dco-1) experimental; urgency=medium
 .
   * New upstream version 2.6.0~git20220317+dco
     This is a snapshot of the upstream dco branch (data-channel offloading)
 .
 openvpn (2.5.6-1) unstable; urgency=high
 .
   * New upstream version 2.5.6
     CVE-2022-0547 - Potential authentication by-pass with multiple deferred
     authentication plug-ins plug-ins (Closes: #1008015)
Checksums-Sha1:
 f94aeca0281b39be55baf25bc3003ce74ba7ca52 2292 openvpn_2.6.0~git20220518+dco-2ubuntu1.dsc
 1fd8b6c4096a57cfa09b60d8109fb51037e0f7e4 1245052 openvpn_2.6.0~git20220518+dco.orig.tar.gz
 983d447e7122f8212b6d31540d4b920f1a9d4ba2 63880 openvpn_2.6.0~git20220518+dco-2ubuntu1.debian.tar.xz
 aa27e1015703885cdacf9aeaa095f1bded6179cd 8987 openvpn_2.6.0~git20220518+dco-2ubuntu1_source.buildinfo
Checksums-Sha256:
 6de4402b9e3e188c940c11e6e0c846f8db1ce9a851373d0388553001db4f5907 2292 openvpn_2.6.0~git20220518+dco-2ubuntu1.dsc
 50b852ac24a60a13459f0e0a7b59826f538ad5adcc43848b20b64eeddebb8557 1245052 openvpn_2.6.0~git20220518+dco.orig.tar.gz
 0fd47ea5f96ad7d829f78d7e316327b861a3412af73ff3553306f6ce616423a7 63880 openvpn_2.6.0~git20220518+dco-2ubuntu1.debian.tar.xz
 f4ac7ae633cbb6c5a05caca9c9557eb04c504ea8596050b2a4449e248395c3ff 8987 openvpn_2.6.0~git20220518+dco-2ubuntu1_source.buildinfo
Files:
 e61544e65f6b22c7235e0333cba2abc5 2292 net optional openvpn_2.6.0~git20220518+dco-2ubuntu1.dsc
 c653d759adb77da5a2ef2a5d7f4cd784 1245052 net optional openvpn_2.6.0~git20220518+dco.orig.tar.gz
 f0c3b403bbde0cef721f4761e2fffb64 63880 net optional openvpn_2.6.0~git20220518+dco-2ubuntu1.debian.tar.xz
 46e593f18b47e1f83411b135ad773fea 8987 net optional openvpn_2.6.0~git20220518+dco-2ubuntu1_source.buildinfo