Bernd Kuhls
7e7caee21e
package/openvpn: bump version to 2.4.5
...
Changelog: https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24
This bump depends on libressl 2.7.2 to avoid a build error with this
defconfig:
BR2_PACKAGE_LIBRESSL=y
BR2_PACKAGE_OPENVPN=y
Added license hash.
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2018-04-02 11:27:41 +02:00
Bernd Kuhls
aa070c802e
package/openvpn: security bump to version 2.4.4
...
Fixes CVE-2017-12166:
https://community.openvpn.net/openvpn/wiki/CVE-2017-12166
Changelog:
https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com >
2017-09-27 22:03:43 +02:00
Baruch Siach
24f2eb1e15
openvpn: security bump to version 2.4.3
...
Fixes:
CVE-2017-7508 - Remotely-triggerable ASSERT() on malformed IPv6 packet
CVE-2017-7520 - Pre-authentication remote crash/information disclosure for
clients
CVE-2017-7521 - Potential double-free in --x509-alt-username
CVE-2017-7521 - Remote-triggerable memory leaks
CVE-2017-7522 - Post-authentication remote DoS when using the --x509-track
option
Details at
https://community.openvpn.net/openvpn/wiki/VulnerabilitiesFixedInOpenVPN243
Cc: Gustavo Zacarias <gustavo@zacarias.com.ar >
Signed-off-by: Baruch Siach <baruch@tkos.co.il >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2017-06-22 23:26:57 +02:00
Bernd Kuhls
a4e5ee245e
package/openvpn: security bump to 2.4.2
...
Fixes CVE-2017-7478 & CVE-2017-7479:
https://community.openvpn.net/openvpn/wiki/QuarkslabAndCryptographyEngineerAudits
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com >
2017-05-11 21:12:20 +02:00
Vicente Olivert Riera
9ecbe727aa
openvpn: bump version to 2.4.1
...
--disable-eurephia configure option doesn't exist, so remove it.
Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com >
2017-03-25 14:56:43 +01:00
Vicente Olivert Riera
878dc8cc9b
openvpn: bump version to 2.4.0
...
--enable-password-save option has been removed
(9ffd00e754 ). Since
it now defaults to "enabled" in the upstream package, there is no
point in adding Config.in.legacy support for it: Config.in.legacy
logic only kicks in when the option is enabled, but the upstream
package precisely preserve the compatibility with this situation.
Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com >
2017-01-24 23:24:46 +13:00
Bernd Kuhls
c021b13291
package/openvpn: bump version to 2.3.14
...
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com >
2016-12-08 22:22:11 +01:00
Bernd Kuhls
fdc9f9d035
package/openvpn: bump to version 2.3.13
...
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com >
2016-11-04 10:15:06 +01:00
Gustavo Zacarias
40b6d22eab
openvpn: bump to version 2.3.12
...
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2016-08-23 23:14:36 +02:00
Gustavo Zacarias
814e99d21a
openvpn: security bump to version 2.3.11
...
Fixed port-share bug with DoS potential.
Fix buffer overflow by user supplied data.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com >
2016-05-15 22:41:30 +02:00
Gustavo Zacarias
bb446a7b77
Revert "package/openvpn: bump version to 2.3.10"
...
openvpn 2.3.10 doesn't work with polarssl 1.2.x, hence this bump breaks
builds for the polarssl backend.
This reverts commit 06f3e7904f .
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar >
Reviewed-by: Bernd Kuhls <bernd.kuhls@t-online.de >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2016-01-31 16:39:17 +01:00
Bernd Kuhls
06f3e7904f
package/openvpn: bump version to 2.3.10
...
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2016-01-31 11:26:49 +01:00
Gustavo Zacarias
152fffa4a4
openvpn: bump to version 2.3.9
...
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com >
2015-12-17 12:56:21 +01:00
Gustavo Zacarias
85e7763e31
openvpn: bump to version 2.3.8
...
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com >
2015-08-09 11:42:44 +02:00
Gustavo Zacarias
fb67b749ca
openvpn: bump to version 2.3.7
...
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com >
2015-06-09 22:43:34 +02:00
Fabian Mewes
8214188319
openvpn: CVE-2014-8104: bump to version 2.3.6
...
see
https://community.openvpn.net/openvpn/wiki/SecurityAnnouncement-97597e732b
Signed-off-by: Fabian Mewes <architekt@coding4coffee.org >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2014-12-02 10:30:19 +01:00
Gustavo Zacarias
6a6acc5b79
openvpn: bump to version 2.3.5
...
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com >
2014-10-29 21:43:03 +01:00
Gustavo Zacarias
f4936d76b4
openvpn: add hash file
...
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar >
Acked-by: "Yann E. MORIN" <yann.morin.1998@free.fr >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com >
2014-10-19 19:24:58 +02:00