From nobody Wed Apr 02 19:33:26 2025 X-Original-To: dev-commits-ports-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4ZSZm71Ttkz5rV2Y; Wed, 02 Apr 2025 19:33:27 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R10" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4ZSZm66Csgz3MV2; Wed, 02 Apr 2025 19:33:26 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1743622406; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=F72qEzYWH3fNuSGhZWuQTvbBVcfqPyKl3CaGomodkKY=; b=Wo2/LXcmt4hcg5r2eC98A1lUuhbkac3y7weUxn0OGXHOQB25HAYTkI0SELn6SlSBR1Rdyp 5DKX1QfsBglmkg7h9FToR0tmoaj8DDOwiKsOyaBx6XctPk75xY1HbEeUuyxRnpSCd49+PQ PQrM4S2Rirt8BKxOjT2SnwIos0LUYIJO0vZes2UHkDoDBibMYSVoHkzNH+wcbYxBk0veHc X96ZzbBo1HazQJiiRD2hfWFpYcyAs4ygbLI0oMtvpXDbuTPf0mZwdhrgzy1gDLmiRb9+A1 zP0TmobiD/CyAhAxfHE6wcTsuyiDb4vY3h5yn5TPsdMBTXqk5KFSM64XXQqIkg== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1743622406; a=rsa-sha256; cv=none; b=VDzuqMIb4kJfMu4P764ggBnBgRidwOBiVv4gZzCYcd5ShtatcOsS8K8EGNJOVu9CEbj4MN WtndUgs3xagAZN8Rdz9nWwWFZgZIjN32Z/FAKNse9171RNu3NrHIA8pjh0+Ay2PhjdEirX YP99zMmceBQ4W7e+LRGsccsZp19EGjH3r/n36c3xME5YzrqfHxkur8+ohLxjMa/ym02rDP LEgwdYUjOI2wtK6zREcJam8CP79hp+mEc9VLb2077PyIw47L6XyjJapI73HIne0x9RjJup N9P3LzfNiJOddTa0VkFNuOtmo581QMwf8EHAxE73BBq/hlxSKVDbNlBLF0ZrEw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1743622406; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=F72qEzYWH3fNuSGhZWuQTvbBVcfqPyKl3CaGomodkKY=; b=HHa8NRIyuPxe0ikTuDtvsie9q/N3Xr6RSgPmFD1F97XdJ9m92+CCRQ5FQRlBaa9CVBiu3i kgOIcAP9IlT8YwRAolNiy18RxVyAYY0AxI/BxHS/gGUkYUCU+GGjw8SecLxMvcoJDJMxlj IijuwzfSMf5b14uauYtmgwqS7Swlf5mNS6L9dEptY11yi+95KcMNTq8kg0FyUrNlZ+xnRT 9FyMiQKgZ7VIu+KHeV3uuEEOaaX2P5gQCgvaG4GMaZv7zy1iOvySRSe/kTH075F6H63rFA 0xYqShruqNZohxcSzqII21ETl0Y5i7eSiNwnxILDpvPxjsZH8SSe6gAWEuFklg== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4ZSZm64vNVzTyM; Wed, 02 Apr 2025 19:33:26 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.18.1/8.18.1) with ESMTP id 532JXQQW047322; Wed, 2 Apr 2025 19:33:26 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.18.1/8.18.1/Submit) id 532JXQVu047319; Wed, 2 Apr 2025 19:33:26 GMT (envelope-from git) Date: Wed, 2 Apr 2025 19:33:26 GMT Message-Id: <202504021933.532JXQVu047319@gitrepo.freebsd.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org From: Matthias Andree Subject: git: 70a3176764f0 - main - security/openvpn: security update to 2.6.14 List-Id: Commit messages for all branches of the ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-ports-all@freebsd.org Sender: owner-dev-commits-ports-all@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: mandree X-Git-Repository: ports X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 70a3176764f09cfeb26bc8d4c9463e7497a299c0 Auto-Submitted: auto-generated The branch main has been updated by mandree: URL: https://cgit.FreeBSD.org/ports/commit/?id=70a3176764f09cfeb26bc8d4c9463e7497a299c0 commit 70a3176764f09cfeb26bc8d4c9463e7497a299c0 Author: Matthias Andree AuthorDate: 2025-04-02 19:26:30 +0000 Commit: Matthias Andree CommitDate: 2025-04-02 19:31:46 +0000 security/openvpn: security update to 2.6.14 "Fix possible ASSERT() on OpenVPN servers using --tls-crypt-v2 Security scope: OpenVPN servers between 2.6.1 and 2.6.13 using --tls-crypt-v2 can be made to abort with an ASSERT() message by sending a particular combination of authenticated and malformed packets. To trigger the bug, a valid tls-crypt-v2 client key is needed, or network observation of a handshake with a valid tls-crypt-v2 client key No crypto integrity is violated, no data is leaked, and no remote code execution is possible. This bug does not affect OpenVPN clients." ChangeLog: https://github.com/OpenVPN/openvpn/blob/v2.6.14/Changes.rst#overview-of-changes-in-2614 Security: 2cad4541-0f5b-11f0-89f8-411aefea0df9 Security: CVE-2025-2704 MFH: 2025Q2 --- security/openvpn/Makefile | 2 +- security/openvpn/distinfo | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/security/openvpn/Makefile b/security/openvpn/Makefile index e48256c0a03b..371625b3361e 100644 --- a/security/openvpn/Makefile +++ b/security/openvpn/Makefile @@ -1,5 +1,5 @@ PORTNAME= openvpn -DISTVERSION= 2.6.13 +DISTVERSION= 2.6.14 PORTREVISION?= 0 CATEGORIES= security net net-vpn MASTER_SITES= https://swupdate.openvpn.org/community/releases/ \ diff --git a/security/openvpn/distinfo b/security/openvpn/distinfo index d9ee1ee81458..9274b1ed493c 100644 --- a/security/openvpn/distinfo +++ b/security/openvpn/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1737076293 -SHA256 (openvpn-2.6.13.tar.gz) = 1af10b86922bd7c99827cc0f151dfe9684337b8e5ebdb397539172841ac24a6a -SIZE (openvpn-2.6.13.tar.gz) = 1911719 +TIMESTAMP = 1743554391 +SHA256 (openvpn-2.6.14.tar.gz) = 9eb6a6618352f9e7b771a9d38ae1631b5edfeed6d40233e243e602ddf2195e7a +SIZE (openvpn-2.6.14.tar.gz) = 1926343