Merge branch 'release/2.7' into master-merge

Author: Yuriy Darnobyt

debian-sbuild/openvpn/changelog-2.7~rc3

@@ -0,0 +1,35 @@
+openvpn (2.7~rc3-debian0) stable; urgency=medium
+
+  * OpenVPN Release 2.7_rc3 (Gert Doering, 31ef3d66)
+  * interactive.c: harden pipe handling against misbehaving clients (Lev Stipakov, 6088451b)
+  * dco: process messages immediately after read (Ralf Lici, 7791f535)
+  * Remove remainders of --no-name-remapping option (Gert Doering, 0effd6ca)
+  * extract_x509_field_ssl(): verify that X509_NAME is not NULL. (Gert Doering, f18e3141)
+  * configure/CMake: Unify Windows handling (Frank Lichtenheld, afdf0028)
+  * configure/CMake: Remove unused checks (Frank Lichtenheld, e52f03d4)
+  * Linux: Assume we have a kernel that was release in the last 15 years (Frank Lichtenheld, 2abfb759)
+  * error: Allow status argument to check_status to be ssize_t (Frank Lichtenheld, ea2f8ef6)
+  * Changes.rst: Fix various syntax errors and typos (Frank Lichtenheld, 123cc9a0)
+  * Change '--multihome' behaviour regarding egress interface selection. (Gert Doering, eeb866ac)
+  * iservice: rename one_glyph to glyph_size (Heiko Hund, dd1524c0)
+  * iservice: fix off by one error (Heiko Hund, dc5baf80)
+  * iservice: handle ignoring itf domains correctly (Heiko Hund, c0cb5102)
+  * iservice: return correct size when domains are truncated (Heiko Hund, aeda359e)
+  * iservice: fix calculation of converted domains size (Heiko Hund, ac6c9d65)
+  * multi-socket: do not return tuntap flags on server-side (Gianmarco De Gregori, 6244e466)
+  * Restrict access to the service pipe to SYSTEM and owner (Selva Nair, 0a429cb1)
+  * Harden interactive service pipe (Selva Nair, 05d0808e)
+  * iservice: check for NULL pointer (Heiko Hund, 2e2ac94e)
+  * iservice: make sure registry string is terminated (Heiko Hund, a1c41b0a)
+  * iservice: make sure buffer size is not zero (Heiko Hund, c20a960a)
+  * multi-socket: remove duplicated/dead code (Gianmarco De Gregori, 779ab39d)
+  * iservice: fix buffer size in call to FormatMessage (Heiko Hund, b39bed53)
+  * tls_crypt: Fix Coverity complaint in tls_crypt_v2_check_client_key_age (Frank Lichtenheld, 2969837a)
+  * GHA: Add macos-26 and remove OpenSSL 1.1 builds on macOS (Frank Lichtenheld, 98077190)
+  * Add option to check tls-crypt-v2 key timestamps (Max Fillinger, 20b234b2)
+  * GHA: Maintenance update November 2025 (Frank Lichtenheld, 92eaedbe)
+  * doc: Document potential filesystem pitfalls of client-config-dir (Frank Lichtenheld, 8d278223)
+  * route: handle default gateway (net_gateway) and nexthop towards VPN server separately (Marco Baffo, 2777cdd3)
+  * vcpkg-ports/pkcs11-helper: bump version to 1.31 (Selva Nair, 3d0d4b1c)
+
+ -- Yuriy Darnobyt <[email protected]>  Fri, 28 Nov 2025 17:23:54 +0100

debian-sbuild/ovpn-backports/changelog-6.17.0.2025112700

@@ -0,0 +1,5 @@
+ovpn-backports (6.17.0.2025112700-debian0) stable; urgency=medium
+
+  * Generated sources for ovpn-net-next/main-6.17.0-2025112700 (GitHub Actions, f22c4b9)
+
+ -- Yuriy Darnobyt <[email protected]>  Thu, 27 Nov 2025 11:03:35 +0000

release/vars.example

@@ -23,20 +23,20 @@ GIT_AUTHOR="Yuriy Darnobyt <[email protected]>"
 MSI_BUILD_ONLY="NO"
 
 # Version numbers
-OPENVPN_PREVIOUS_VERSION="${OPENVPN_PREVIOUS_VERSION:-2.7_rc1}"
-OPENVPN_CURRENT_VERSION="${OPENVPN_CURRENT_VERSION:-2.7_rc2}"
+OPENVPN_PREVIOUS_VERSION="${OPENVPN_PREVIOUS_VERSION:-2.7_rc2}"
+OPENVPN_CURRENT_VERSION="${OPENVPN_CURRENT_VERSION:-2.7_rc3}"
 OPENVPN_CURRENT_TAG="${OPENVPN_CURRENT_TAG:-HEAD}"
 OPENVPN_PREVIOUS_TAG="refs/tags/v$OPENVPN_PREVIOUS_VERSION"
 
 OPENVPN_GUI_CURRENT_MAJ_VERSION=11
-OPENVPN_GUI_CURRENT_MIN_VERSION=58
+OPENVPN_GUI_CURRENT_MIN_VERSION=59
 OPENVPN_GUI_CURRENT_FULL_VERSION="$OPENVPN_GUI_CURRENT_MAJ_VERSION.$OPENVPN_GUI_CURRENT_MIN_VERSION.0.0"
 OPENVPN_GUI_BRANCH="master"
 
-OPENVPN_DCO_PREVIOUS_VERSION="${OPENVPN_DCO_PREVIOUS_VERSION:-6.17.0.2025100701}"
-OPENVPN_DCO_CURRENT_VERSION="${OPENVPN_DCO_CURRENT_VERSION:-6.17.0.2025102200}"
-OPENVPN_DCO_CURRENT_TAG="${OPENVPN_DCO_CURRENT_TAG:-refs/tags/ovpn-net-next/main-6.17.0-2025102200}"
-OPENVPN_DCO_PREVIOUS_TAG="${OPENVPN_DCO_PREVIOUS_TAG:-refs/tags/ovpn-net-next/main-6.17.0-2025100701}"
+OPENVPN_DCO_PREVIOUS_VERSION="${OPENVPN_DCO_PREVIOUS_VERSION:-6.17.0.2025102200}"
+OPENVPN_DCO_CURRENT_VERSION="${OPENVPN_DCO_CURRENT_VERSION:-6.17.0.2025112700}"
+OPENVPN_DCO_CURRENT_TAG="${OPENVPN_DCO_CURRENT_TAG:-refs/tags/ovpn-net-next/main-6.17.0-2025112700}"
+OPENVPN_DCO_PREVIOUS_TAG="${OPENVPN_DCO_PREVIOUS_TAG:-refs/tags/ovpn-net-next/main-6.17.0-2025102200}"
 
 INSTALLER_BUILD=1
 INSTALLER_VERSION="I"$(printf "%03d\n" $INSTALLER_BUILD)