Home / vtun / 3.0.4
Name Modified Size InfoDownloads / Week
Parent folder
vtun-3.0.4.tar.gz 2016-10-02 132.7 kB
vtun-3.0.4-1.centos5.x86_64.rpm 2016-10-02 68.0 kB
vtun-3.0.4-1.centos6.x86_64.rpm 2016-10-02 62.2 kB
vtun-3.0.4-1.centos7.x86_64.rpm 2016-10-02 60.9 kB
vtun-3.0.4-1.src.rpm 2016-10-02 142.6 kB
readme.txt 2016-09-19 1.6 kB
Totals: 6 Items   468.0 kB 33

Readme for VTun release 3.0.4
-----------------------------

Hey Kids.

VTun 3.0.4 is building well, has a few patches, and something happened
so I wanted to release it.  More on that.


What's included:
----------------
This release includes a few fixes:

3.0.4
        bug53 - Race condition in socket() vs syslog (AH)
        patch23 - check for fork and work around lack (AM)
        patch22 - static declarations where possible (AM)
        patch21 - fix up configure.in for newer autoheader (AM)


What's not included
-------------------

Modular crypt/transport :-(
EL7/systemd start scripts
Bug58 - HUP killing some clients - see below

What's missing of note is a fix to a rumoured issue with HUPs causing
some kind of loop with half-closed connections[1].  It was an issue
reported once on a debian code fork, it may not have been assessed,
and it was labeled a security issue (DoS; not a privacy risk).

I'm not sure it's not an issue, even if it was declined as a valid
security bug [2].  It was picked up and quickly patched everywhere
under the sun, really -- and for that a huge thanks goes out to Gabe
Somlo and Salvatore Bonaccorso for their fast response.

But I'd like to study it a bit.  Watch for HUPs causing your node to
freak out, its CPU to climb and its logfiles fill up with loops of
connecting/starting info.  It's not fixed, and it'll be present in at
least 3.0.3 and this release.  If you DO see it help me get a handle
on it immediately.

[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=818489
[2] http://seclists.org/oss-sec/2016/q2/173
[3] https://sourceforge.net/p/vtun/bugs/58/

Thanks

Source: readme.txt, updated 2016-09-19