[ubuntu/bionic-proposed] openvpn 2.4.4-1ubuntu1 (Accepted)

[Jeremy Bicha]

openvpn (2.4.4-1ubuntu1) bionic; urgency=medium

  * Sync with Debian. Remaining changes:
    - debian/openvpn at .service: Add "--script-security 2" similar to what got
      added to debian/openvpn.init.d ages ago (LP: #1454725)
    - Demote easy-rsa to Suggests (universe package).

openvpn (2.4.4-1) unstable; urgency=medium

  [ Jörg Frings-Fürst ]
  * New Upstream release:
    - Fix bounds check in read_key() (CVE-2017-12166) (Closes: #877089).
  * Declare compliance with Debian Policy 4.1.1. (No changes needed).
  * Drop dh-systemd from both Build-Depends and dh command line as
    it is enabled by default for dh compat level 10.
  * New debian/openvpn.lintian-overrides:
    - Override duplicate upstream changelog warning.
  * Remote obsolete directory /usr/lib/openvpn (The plugins directory are now
      /usr/lib/*/openvpn/plugins):
    - Remove /usr/lib/openvpn from debian/dirs.
    - Add debian/postrm to remove /usr/lib/openvpn on purge and remove.
    - Rewrite plugin section at README.Debian
  * Use pathfind() instead hard coded path for invoke-rc.d at debian/prerm
    and debian/postinst.
  * Remove outdated debian/README.source.
  * Remove obsolete syslog.target from debian/openvpn at .service.
  * Update Catalan translation (Closes: #870351).
    - Thanks to Alytidae <alytidae at riseup.net>.
  * New directory /var/log/openvpn for log and status files
      (Closes: #444431, #553303):
    - Add var/log/openvpn into debian/dirs.
    - New debian/patches/move_log_dir.patch to change the conf files
      to the new log directory.

  [ Bernhard Schmidt ]
  * Further changes to debian/openvpn at .service copied from upstream
    - Enable Restart=on-failure
    - Use KillMode=process

Date: Sat, 28 Oct 2017 15:13:58 -0400
Changed-By: Jeremy Bicha <jbicha at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/openvpn/2.4.4-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 28 Oct 2017 15:13:58 -0400
Source: openvpn
Binary: openvpn
Architecture: source
Version: 2.4.4-1ubuntu1
Distribution: bionic
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Jeremy Bicha <jbicha at ubuntu.com>
Description:
 openvpn    - virtual private network daemon
Closes: 444431 553303 870351 877089
Launchpad-Bugs-Fixed: 1454725
Changes:
 openvpn (2.4.4-1ubuntu1) bionic; urgency=medium
 .
   * Sync with Debian. Remaining changes:
     - debian/openvpn at .service: Add "--script-security 2" similar to what got
       added to debian/openvpn.init.d ages ago (LP: #1454725)
     - Demote easy-rsa to Suggests (universe package).
 .
 openvpn (2.4.4-1) unstable; urgency=medium
 .
   [ Jörg Frings-Fürst ]
   * New Upstream release:
     - Fix bounds check in read_key() (CVE-2017-12166) (Closes: #877089).
   * Declare compliance with Debian Policy 4.1.1. (No changes needed).
   * Drop dh-systemd from both Build-Depends and dh command line as
     it is enabled by default for dh compat level 10.
   * New debian/openvpn.lintian-overrides:
     - Override duplicate upstream changelog warning.
   * Remote obsolete directory /usr/lib/openvpn (The plugins directory are now
       /usr/lib/*/openvpn/plugins):
     - Remove /usr/lib/openvpn from debian/dirs.
     - Add debian/postrm to remove /usr/lib/openvpn on purge and remove.
     - Rewrite plugin section at README.Debian
   * Use pathfind() instead hard coded path for invoke-rc.d at debian/prerm
     and debian/postinst.
   * Remove outdated debian/README.source.
   * Remove obsolete syslog.target from debian/openvpn at .service.
   * Update Catalan translation (Closes: #870351).
     - Thanks to Alytidae <alytidae at riseup.net>.
   * New directory /var/log/openvpn for log and status files
       (Closes: #444431, #553303):
     - Add var/log/openvpn into debian/dirs.
     - New debian/patches/move_log_dir.patch to change the conf files
       to the new log directory.
 .
   [ Bernhard Schmidt ]
   * Further changes to debian/openvpn at .service copied from upstream
     - Enable Restart=on-failure
     - Use KillMode=process
Checksums-Sha1:
 a707955888b7a386da862dca8dfd555cd9d2f4d0 2165 openvpn_2.4.4-1ubuntu1.dsc
 a1ad49cf5d5ac8f94630ccb91053d6b7d5a52729 1381447 openvpn_2.4.4.orig.tar.gz
 d20ac1107b566cc62a98223f8a7c4f3281feaca3 52636 openvpn_2.4.4-1ubuntu1.debian.tar.xz
 901f84da59a35877faa9ae9db900d0370ff1ef62 6749 openvpn_2.4.4-1ubuntu1_source.buildinfo
Checksums-Sha256:
 89b974ec8304a62b8744e5b358e772c3807c7441619c66f80f68e6639fb5a904 2165 openvpn_2.4.4-1ubuntu1.dsc
 ec1536c25a03085508327d3295eaa2b667e0164a91cd8ecb23777567b03e7a81 1381447 openvpn_2.4.4.orig.tar.gz
 0bb04170208cc6035dd2db22de4f0934e229d9f9ea075d470cca33ca00d10faf 52636 openvpn_2.4.4-1ubuntu1.debian.tar.xz
 e0a5a82854fc10217e762a5dca72f5d05089eb1fa3ded5f142cabc6b3111bf45 6749 openvpn_2.4.4-1ubuntu1_source.buildinfo
Files:
 80f336fb98e41d15c25b55643c25aa54 2165 net optional openvpn_2.4.4-1ubuntu1.dsc
 8ccced91f2bd8b5e8994e0b55d3178a0 1381447 net optional openvpn_2.4.4.orig.tar.gz
 8687d35c5c193d331b6952a1bad1f51b 52636 net optional openvpn_2.4.4-1ubuntu1.debian.tar.xz
 99f1ea50cf1af675eec8a9bfe146e012 6749 net optional openvpn_2.4.4-1ubuntu1_source.buildinfo
Original-Maintainer: Bernhard Schmidt <berni at debian.org>

-----BEGIN PGP SIGNATURE-----

iQIcBAEBCgAGBQJZ9NdWAAoJEOZsd1rr/mx9BhoQAKIiqx3eU8UJqnK3G5FxzRGU
vyAy5VsLcDNVa9NUWt9MBBt7wWi3TX9eFOd9GABIpdJCQFsPyIpWHWRKF29KcX5F
WdNk9Wsl++ag6gM6+aIVsR9OrwTxLyUULAXOVvLukWBs75Q2T/xPYGIkKd97EYzJ
gZdP5CYW9tAQ2U43gIbemsJ186MjyC+DHNQO07dQL2RPNgUpYukp/tYdWGnM8wko
gCSs2Vtv3oXox5TVwDqhmFdn7HP3LPedqsMdiafv4XjQYuwcH3iNcyolAQ/b2ORu
bR2d2Skbg33F0y/L6UWOMcDS0iyvkhQRRS/cPeFqYx/leiu4UlMUpmVu7rt9ZFJt
C6XZOo3Pv/D/qSC2F7WWBxsu0wvGJimQqKgGtjzKJbrrPmNRk//36p3+wDSWROir
fUmj1sUqUGqYgowAVOcnFdpqsPDI5pEuzKKPcQE7PJLG6EfswKFgzeVR3D3l307q
co+d8mnEgH6UlbuNl0QVyZJyR1YMQ+Fc1RNvr4jVpZfeneyXzw8FI0POdpuJe2Vs
MeHmq75gorQG3FZxb2XJbbd/omQMVNfpj4wK5zRi93oN2FbaVkNEcohOfb97+u/m
ysEUuQROt+tU/oRB3yerSWAMt4JrXaV+vF+HqVwccsRGmziczsokQD+a6nity/xy
yFx/B9nzV00ysWicUXKq
=ELFf
-----END PGP SIGNATURE-----