CVSROOT: /cvs
Module name: ports
Changes by: [email protected] 2025/11/18 05:31:14
Modified files:
net/openvpn : Tag: OPENBSD_7_8 Makefile distinfo
net/openvpn/patches: Tag: OPENBSD_7_8 patch-configure
patch-include_Makefile_in
Log message:
MFC: SECURITY update to openvpn-2.6.16
Fixes CVE-2025-13086
|Fix memcmp check for the hmac verification in the 3way handshake.
|This bug renders the HMAC based protection against state exhaustion on
|receiving spoofed TLS handshake packets in the OpenVPN server inefficient.
Full changelog:
https://github.com/OpenVPN/openvpn/blob/v2.6.16/Changes.rst
