git: ced5ef87cb31 - 2026Q2 - security/openvpn-devel: upgrade to commit 64fae9d829
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Thu, 02 Jul 2026 02:13:53 UTC
The branch 2026Q2 has been updated by vvd:
URL: https://cgit.FreeBSD.org/ports/commit/?id=ced5ef87cb313e3af44d0a15e5ecd9613d868ed4
commit ced5ef87cb313e3af44d0a15e5ecd9613d868ed4
Author: Gert Doering <gert@greenie.muc.de>
AuthorDate: 2026-04-22 08:32:54 +0000
Commit: Vladimir Druzenko <vvd@FreeBSD.org>
CommitDate: 2026-07-02 02:13:22 +0000
security/openvpn-devel: upgrade to commit 64fae9d829
this brings in the upstream development work that has happened over
the last two months, plus two CVE fixes:
- fix race condition in TLS handshake that could lead to leaking of
packet data from a previous handshake under specific circumstances
(CVE-2026-40215)
(Bug found by XlabAI Team of Tencent Xuanwu Lab (xlabai@tencent.com))
- fix server ASSERT() on receiving a suitably malformed packet with
a valid tls-crypt-v2 key (CVE-2026-35058)
(Bug found by XlabAI Team of Tencent Xuanwu Lab (xlabai@tencent.com)
and independently by Emma Reuter of Cisco ASIG (TALOS-2026-2381))
besides this, most of the commits are code maintenance - modernizing
code, adjusting OpenSSL APIs used to be 4.0 compatible, adding more
unit tests, fixing integer related warnings, improve documentation,
some minor performance improvements wrt internal hashing.
Notable change for FreeBSD: fix use of ovpn(4) on kernels compiled
without INET (change use of ioctl() sockets to AF_LOCAL).
PR: 294712
(cherry picked from commit 191826dd19691756a9d7d79e341efd6ef8c925bb)
---
security/openvpn-devel/Makefile | 10 +++++-----
security/openvpn-devel/distinfo | 6 +++---
2 files changed, 8 insertions(+), 8 deletions(-)
diff --git a/security/openvpn-devel/Makefile b/security/openvpn-devel/Makefile
index b68c772bdeaa..bb46454744a0 100644
--- a/security/openvpn-devel/Makefile
+++ b/security/openvpn-devel/Makefile
@@ -1,5 +1,5 @@
PORTNAME= openvpn
-DISTVERSION= g20270220
+DISTVERSION= g20270422
PORTREVISION= 0 # leave in even if 0 to avoid accidental PORTEPOCH bumps
PORTEPOCH= 1
CATEGORIES= security net net-vpn
@@ -21,7 +21,7 @@ LIB_DEPENDS+= liblzo2.so:archivers/lzo2
USES= autoreconf cpe libtool pkgconfig python:build shebangfix tar:xz
IGNORE_SSL= libressl libressl-devel
USE_GITLAB= yes
-GL_TAGNAME= 38243844f225517fa1d288517db9a34a33c5ad13
+GL_TAGNAME= 64fae9d82989ede6c92e230c594ab9335c05df8d
USE_RC_SUBR= openvpn
SHEBANG_FILES= sample/sample-scripts/auth-pam.pl \
@@ -50,7 +50,8 @@ SUB_FILES= openvpn-client pkg-message
PORTDOCS= *
PORTEXAMPLES= *
-OPTIONS_DEFINE= ASYNC_PUSH DCO DOCS EASYRSA EXAMPLES LZ4 PKCS11 SMALL TEST UNITTEST
+OPTIONS_DEFINE= ASYNC_PUSH DCO DOCS EASYRSA EXAMPLES LZ4 PKCS11 SMALL
+OPTIONS_DEFINE+= TEST UNITTESTS
OPTIONS_DEFAULT= DCO EASYRSA LZ4 OPENSSL TEST
OPTIONS_SINGLE= SSL
OPTIONS_SINGLE_SSL= MBEDTLS OPENSSL
@@ -63,7 +64,7 @@ DCO_DESC= Build with Data Channel Offload (ovpn(4)) support
EASYRSA_DESC= Install security/easy-rsa RSA helper package
PKCS11_DESC= Use security/pkcs11-helper
SMALL_DESC= Build a smaller executable with fewer features
-UNITTESTS_DESC= Enable unit tests
+UNITTESTS_DESC= Enable unit tests
# option implementations
@@ -129,7 +130,6 @@ LIB_DEPENDS+= libinotify.so:devel/libinotify
. endif
.endif
-
# sanity check that we don't inherit incompatible SSL libs through,
# for instance, pkcs11-helper:
post-build:
diff --git a/security/openvpn-devel/distinfo b/security/openvpn-devel/distinfo
index 9a55f6295672..391cf9d68d36 100644
--- a/security/openvpn-devel/distinfo
+++ b/security/openvpn-devel/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1771599392
-SHA256 (openvpn-openvpn-38243844f225517fa1d288517db9a34a33c5ad13_GL0.tar.gz) = 838a56d90d0040d1067eefddf4b0309e386b81aa353c553561166fc0b7458423
-SIZE (openvpn-openvpn-38243844f225517fa1d288517db9a34a33c5ad13_GL0.tar.gz) = 1332398
+TIMESTAMP = 1776872343
+SHA256 (openvpn-openvpn-64fae9d82989ede6c92e230c594ab9335c05df8d_GL0.tar.gz) = 799aea2ab9d4d42784402e4438a465f86e94f61884b0b54e81ede3e89c2ca08b
+SIZE (openvpn-openvpn-64fae9d82989ede6c92e230c594ab9335c05df8d_GL0.tar.gz) = 1343378