Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 17 Jan 2025 01:45:44 GMT
From:      Matthias Andree <mandree@FreeBSD.org>
To:        ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-branches@FreeBSD.org
Subject:   git: ea08b2ed7336 - 2025Q1 - security/openvpn: critical update to 2.6.13
Message-ID:  <202501170145.50H1jicq053541@gitrepo.freebsd.org>

next in thread | raw e-mail | index | archive | help
The branch 2025Q1 has been updated by mandree:

URL: https://cgit.FreeBSD.org/ports/commit/?id=ea08b2ed7336931b9f25b46299098ab444b35e72

commit ea08b2ed7336931b9f25b46299098ab444b35e72
Author:     Matthias Andree <mandree@FreeBSD.org>
AuthorDate: 2025-01-17 01:24:59 +0000
Commit:     Matthias Andree <mandree@FreeBSD.org>
CommitDate: 2025-01-17 01:41:32 +0000

    security/openvpn: critical update to 2.6.13
    
    ChangeLog:      https://github.com/OpenVPN/openvpn/blob/v2.6.13/Changes.rst#overview-of-changes-in-2613
    
    Notably: Security fixes
    
    improve server-side handling of clients sending usernames or
    passwords longer than USER_PASS_LEN - this would not result in a crash,
    buffer overflow or other security issues, but the server would then
    misparse incoming IV_* variables and produce misleading error messages.
    
    Security:       47bc292a-d472-11ef-aaab-7d43732cb6f5
    MFH:            2025Q1
    (cherry picked from commit 874ce689efb62c57af37c11df691d549a54027dc)
---
 security/openvpn/Makefile | 2 +-
 security/openvpn/distinfo | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/security/openvpn/Makefile b/security/openvpn/Makefile
index 14813d532361..e48256c0a03b 100644
--- a/security/openvpn/Makefile
+++ b/security/openvpn/Makefile
@@ -1,5 +1,5 @@
 PORTNAME=		openvpn
-DISTVERSION=		2.6.12
+DISTVERSION=		2.6.13
 PORTREVISION?=		0
 CATEGORIES=		security net net-vpn
 MASTER_SITES=		https://swupdate.openvpn.org/community/releases/ \
diff --git a/security/openvpn/distinfo b/security/openvpn/distinfo
index c56b2132a403..d9ee1ee81458 100644
--- a/security/openvpn/distinfo
+++ b/security/openvpn/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1721330148
-SHA256 (openvpn-2.6.12.tar.gz) = 1c610fddeb686e34f1367c347e027e418e07523a10f4d8ce4a2c2af2f61a1929
-SIZE (openvpn-2.6.12.tar.gz) = 1912400
+TIMESTAMP = 1737076293
+SHA256 (openvpn-2.6.13.tar.gz) = 1af10b86922bd7c99827cc0f151dfe9684337b8e5ebdb397539172841ac24a6a
+SIZE (openvpn-2.6.13.tar.gz) = 1911719



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202501170145.50H1jicq053541>