ocserv (1.6.0-1) UNRELEASED; urgency=medium

  The server-side IPv6 tunnel address is now the network address of
  ipv6-network, rather than the network address plus one. Update firewall
  rules, DNS settings and scripts that refer to the former ::1 address.

  Malformed per-user, per-group or default configuration files now cause
  affected sessions to be rejected rather than silently ignored. Configured
  default-user-conf and default-group-conf files that cannot be opened also
  cause session rejection. Check these files before upgrading.

 -- Aron Xu <aron@debian.org>  Sun, 25 Oct 2026 00:54:49 +0800