git: 70a3176764f0 - main - security/openvpn: security update to 2.6.14
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Wed, 02 Apr 2025 19:33:26 UTC
The branch main has been updated by mandree: URL: https://cgit.FreeBSD.org/ports/commit/?id=70a3176764f09cfeb26bc8d4c9463e7497a299c0 commit 70a3176764f09cfeb26bc8d4c9463e7497a299c0 Author: Matthias Andree <mandree@FreeBSD.org> AuthorDate: 2025-04-02 19:26:30 +0000 Commit: Matthias Andree <mandree@FreeBSD.org> CommitDate: 2025-04-02 19:31:46 +0000 security/openvpn: security update to 2.6.14 "Fix possible ASSERT() on OpenVPN servers using --tls-crypt-v2 Security scope: OpenVPN servers between 2.6.1 and 2.6.13 using --tls-crypt-v2 can be made to abort with an ASSERT() message by sending a particular combination of authenticated and malformed packets. To trigger the bug, a valid tls-crypt-v2 client key is needed, or network observation of a handshake with a valid tls-crypt-v2 client key No crypto integrity is violated, no data is leaked, and no remote code execution is possible. This bug does not affect OpenVPN clients." ChangeLog: https://github.com/OpenVPN/openvpn/blob/v2.6.14/Changes.rst#overview-of-changes-in-2614 Security: 2cad4541-0f5b-11f0-89f8-411aefea0df9 Security: CVE-2025-2704 MFH: 2025Q2 --- security/openvpn/Makefile | 2 +- security/openvpn/distinfo | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/security/openvpn/Makefile b/security/openvpn/Makefile index e48256c0a03b..371625b3361e 100644 --- a/security/openvpn/Makefile +++ b/security/openvpn/Makefile @@ -1,5 +1,5 @@ PORTNAME= openvpn -DISTVERSION= 2.6.13 +DISTVERSION= 2.6.14 PORTREVISION?= 0 CATEGORIES= security net net-vpn MASTER_SITES= https://swupdate.openvpn.org/community/releases/ \ diff --git a/security/openvpn/distinfo b/security/openvpn/distinfo index d9ee1ee81458..9274b1ed493c 100644 --- a/security/openvpn/distinfo +++ b/security/openvpn/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1737076293 -SHA256 (openvpn-2.6.13.tar.gz) = 1af10b86922bd7c99827cc0f151dfe9684337b8e5ebdb397539172841ac24a6a -SIZE (openvpn-2.6.13.tar.gz) = 1911719 +TIMESTAMP = 1743554391 +SHA256 (openvpn-2.6.14.tar.gz) = 9eb6a6618352f9e7b771a9d38ae1631b5edfeed6d40233e243e602ddf2195e7a +SIZE (openvpn-2.6.14.tar.gz) = 1926343