CVSROOT: /cvs
Module name: ports
Changes by: [email protected] 2017/05/15 17:44:41
Modified files:
net/openvpn : Tag: OPENBSD_6_1 Makefile distinfo
net/openvpn/patches: Tag: OPENBSD_6_1 patch-configure
patch-src_openvpn_tun_c
Added files:
net/openvpn/patches: Tag: OPENBSD_6_1
patch-include_openvpn-plugin_h_in
Log message:
MFC SECURITY update to openvpn-2.4.2
Several security fixes after audits by Quarkslabs and Cryptography
Engineering. At least:
CVE-2017-7478 Don't assert out on receiving too-large control packets
CVE-2017-7479 Drop packets instead of assert out if packet id rolls over
More details:
https://community.openvpn.net/openvpn/wiki/QuarkslabAndCryptographyEngineerAudits
https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24
While here, backport a strict alignement fix from stsp@.
ok danj@ pirofti@. Also add a missing #include to openvpn-plugin.h, to
unbreak net/openvpn-auth-ldap build.