Merge pull request #1144 from OpenVPN/master-merge

Merge branch 'release/2.7' into master

Author: uddr

debian-sbuild/openvpn/changelog-2.7~rc2

@@ -0,0 +1,51 @@
+openvpn (2.7~rc2-debian0) stable; urgency=medium
+
+  * OpenVPN Release 2.7_rc2 (Gert Doering, d6ee27b4)
+  * Fix memcmp check for the hmac verification in the 3way handshake being inverted (Arne Schwabe, 18c483dd)
+  * socket: reject mismatched address family in get_addr_generic (Mikhail Khachaiants, f1b851da)
+  * ssl_pkt: Avoid conversion warnings (Frank Lichtenheld, 5ab76ad9)
+  * ssl: Clean up type handling in parse_early_negotiation_tlvs() (Frank Lichtenheld, abe32bce)
+  * ssl: Clean up type handling in export_user_keying_material() (Frank Lichtenheld, fc00a3c9)
+  * ssl: Clean up type handling in write_string() (Frank Lichtenheld, 2a4b12f5)
+  * ssl: Change update argument of compute_earliest_wakeup to time_t (Frank Lichtenheld, 0e2fc09d)
+  * ssl: Fix conversion warning in tls_prepend_opcode_v1 (Frank Lichtenheld, d926257b)
+  * tls_crypt: Avoid some conversion warnings (Frank Lichtenheld, 8cd99b91)
+  * forward: Change context_reschedule_sec sec argument to time_t (Frank Lichtenheld, 7835c371)
+  * interval: Fix conversion warning (Frank Lichtenheld, eb0666c8)
+  * otime: Fix various conversion warnings (Frank Lichtenheld, f265486b)
+  * tapctl: refactor 'create' command (Lev Stipakov, 8487dbf1)
+  * tapctl: make output of 'list' and 'create' commands more verbose (Lev Stipakov, c8f0e726)
+  * recursive routing: fixes and clean-ups (Lev Stipakov, db241ceb)
+  * tapctl: factor out command handlers (Lev Stipakov, ef4937f8)
+  * iservice: use saved iface index to restore metric (Heiko Hund, a1d4a794)
+  * options: remove --opt-verify functionality (Antonio Quartulli, c716b3b8)
+  * ssl: change return type of calc_control_channel_frame_overhead to size_t (Frank Lichtenheld, 8b0554d9)
+  * pkcs11: Avoid some conversion warnings (Frank Lichtenheld, de82ad64)
+  * Fix construction of invalid pointer in tls_pre_decrypt (Arne Schwabe, 5cdf3f97)
+  * openssl_compat: Avoid conversion warning for SSL_get_negotiated_group (Frank Lichtenheld, 4fa8539a)
+  * ssl: Change tls_send_payload size argument to size_t (Frank Lichtenheld, 0da6116c)
+  * tapctl: use better wording for adapters (Lev Stipakov, 2fe6fd1d)
+  * Do not underestimate number of encrypted/decrypted AEAD blocks (Arne Schwabe, 5e6d478f)
+  * iservice: make sure directories have trailing backslash (Heiko Hund, 985f4eae)
+  * iservice: validate config path case-insensitive (Heiko Hund, 39581501)
+  * win: remove checks for PATHCCH_ENSURE_TRAILING_SLASH (Heiko Hund, 763160a1)
+  * iservice: validate config path better (Heiko Hund, bbca8141)
+  * msvc: fix struct initialization for v19 compilers (Heiko Hund, 5888adc6)
+  * Enable -Wtype-limits by default (via -Wextra) (Frank Lichtenheld, 5d50583b)
+  * dco_freebsd.c: fix integer warnings (Gert Doering, 7e0b68ae)
+  * FreeBSD DCO: repair --inactive (Gert Doering, 7fe5cc03)
+  * dco_freebsd: implement dco_get_peer_stats() (Gert Doering, ce99cd6c)
+  * pkcs11_openssl: Silence a conversion warning (Frank Lichtenheld, 4e9a10ad)
+  * dco_freebsd.c: add D_DCO_DEBUG messages for counters and notifications (Gert Doering, 6711ffa9)
+  * FreeBSD DCO: repair incoming 'delete peer' notifications in p2p client mode (Gert Doering, c4fe7813)
+  * init: make some functions static (Antonio Quartulli, 8545a3db)
+  * PUSH_UPDATE server: update reporting_addr after ifconfig update (Marco Baffo, 38e9dd63)
+  * unit_tests: prefer proper cmocka assert helpers (Antonio Quartulli, c5e99509)
+  * Use correct undo_list when clearing DNS addresses (Selva Nair, 59fed2ad)
+  * test_networking: use appropriate assert helpers (Antonio Quartulli, 21b94373)
+  * openvpnserv: Disallow stdin as config unless user is authorized (Selva Nair, a3d8c402)
+  * iservice: fix DNS address list generation (Heiko Hund, 235aa885)
+  * manage: Correctly handle port 65535 in man_kill (Frank Lichtenheld, 40b29347)
+  * OpenVPN Release 2.7_rc1 (Gert Doering, 4281449b)
+
+ -- Yuriy Darnobyt <[email protected]>  Mon, 17 Nov 2025 11:42:02 +0100

release/vars.example

@@ -23,13 +23,13 @@ GIT_AUTHOR="Yuriy Darnobyt <[email protected]>"
 MSI_BUILD_ONLY="NO"
 
 # Version numbers
-OPENVPN_PREVIOUS_VERSION="${OPENVPN_PREVIOUS_VERSION:-2.7_beta3}"
-OPENVPN_CURRENT_VERSION="${OPENVPN_CURRENT_VERSION:-2.7_rc1}"
+OPENVPN_PREVIOUS_VERSION="${OPENVPN_PREVIOUS_VERSION:-2.7_rc1}"
+OPENVPN_CURRENT_VERSION="${OPENVPN_CURRENT_VERSION:-2.7_rc2}"
 OPENVPN_CURRENT_TAG="${OPENVPN_CURRENT_TAG:-HEAD}"
 OPENVPN_PREVIOUS_TAG="refs/tags/v$OPENVPN_PREVIOUS_VERSION"
 
 OPENVPN_GUI_CURRENT_MAJ_VERSION=11
-OPENVPN_GUI_CURRENT_MIN_VERSION=57
+OPENVPN_GUI_CURRENT_MIN_VERSION=58
 OPENVPN_GUI_CURRENT_FULL_VERSION="$OPENVPN_GUI_CURRENT_MAJ_VERSION.$OPENVPN_GUI_CURRENT_MIN_VERSION.0.0"
 OPENVPN_GUI_BRANCH="master"