secnet 0.3.1~beta3
Ian Jackson
ijackson at chiark.greenend.org.uk
Thu May 8 20:02:06 BST 2014
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
I am pleased to announce secnet 0.3.1~beta3. This is the 3rd beta of
secnet 0.3.1.
0.3.1 contains bugfixes, including some security fixes to
vulnerabilities which are exposed to internal vpn traffic. It also
has a new feature intended to help with underlying network with broken
handling of large packets.
0.3.1~beta3 contains two portability fixes; one to an incompatibility
with some recent versions of GCC and one to a bug introduced in
0.3.1~beta1 affecting non-i386 builds.
0.3.1~beta3 can be found here:
http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git/secnet.git/
http://www.chiark.greenend.org.uk/~secnet/release/0.3.1~beta3/
If you are able to do so conveniently, please test it. It should be
backwards-compatibile with previous versions. For those on the SGO
VPN: chiark is currently running 0.3.1~beta2.
For a summary of the changes see the changelog extracts below. For
full details see the git history.
secnet (0.3.1~beta3) unstable; urgency=low
* Build fixes for non-i386 architectures and gcc 4.8.2.
-- Ian Jackson <ijackson at chiark.greenend.org.uk> Thu, 08 May 2014 19:53:43 +0100
secnet (0.3.1~beta2) unstable; urgency=low
Fix relating to new fragmentation / ICMP functionality:
* Generate ICMP packets correctly in point-to-point configurations.
-- Ian Jackson <ijackson at chiark.greenend.org.uk> Sat, 03 May 2014 18:58:09 +0100
secnet (0.3.1~beta1) unstable; urgency=low
Security fixes (vulnerabilities are to inside attackers only):
* SECURITY: Fixes to MTU and fragmentation handling.
* SECURITY: Correctly set "unused" ICMP header field.
* SECURITY: Fix IP length check not to crash on very short packets.
New feature:
* Make the inter-site MTU configurable, and negotiate it with the peer.
Bugfixes etc.:
* Fix netlink SEGV on clientless netlinks (i.e. configuration error).
* Fix formatting error in p-t-p startup message.
* Do not send ICMP errors in response to unknown incoming ICMP.
* Fix formatting error in secnet.8 manpage.
* Internal code rearrangements and improvements.
Packaging improvements:
* Updates to release checklist in Makefile.in.
* Additions to the test-example suite.
-- Ian Jackson <ijackson at chiark.greenend.org.uk> Thu, 01 May 2014 19:02:56 +0100
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
iQEcBAEBCAAGBQJTa9RtAAoJEOPjOSNItQ05ZPoIAJ4uj4NOAHTDGcdWMPraBwKL
0HuAmipzzSaxMUNkGEdGBah5jQM4VRfPeeV3WV1rfF35bfAXlH0ehyr9q1ffrSY2
xJuOK8cZ1EDLlmImPNXtvBjERHKXoPlyrl6+6vCjRiI/DQ3Lt8lKTPX07F8Uvj/n
iwmjBNG+okkENobFPGhTPI2lnsa/FoCKYF5jharocSuE4hlY0a5tmiU+DqLw/v0K
JaAIBhaJAToGf7+KD2o4GdYtHk8vEGr3TViXEEBU2M3h6KAG/Sab6YjJHmoL1RNg
deeWYiv8hozfg9NYJPh4MtsUezpzfJG5jw0WMUTe8FvzcmgcL/jz/5bzqokPtp4=
=k9RB
-----END PGP SIGNATURE-----
More information about the sgo-software-announce
mailing list