CVSROOT: /cvs
Module name: ports
Changes by: [email protected] 2025/11/18 05:30:36
Modified files:
net/openvpn : Makefile distinfo
net/openvpn/patches: patch-configure patch-include_Makefile_in
Log message:
SECURITY update to openvpn-2.6.16
Fixes CVE-2025-13086
|Fix memcmp check for the hmac verification in the 3way handshake.
|This bug renders the HMAC based protection against state exhaustion on
|receiving spoofed TLS handshake packets in the OpenVPN server inefficient.
Full changelog:
https://github.com/OpenVPN/openvpn/blob/v2.6.16/Changes.rst