packages/net/openvpn
Ivan Pavlov 74a66189f1 openvpn: update to 2.6.14
Security fixes:

​CVE-2025-2704: fix possible ASSERT() on OpenVPN servers using --tls-crypt-v2
 Security scope: OpenVPN servers between 2.6.1 and 2.6.13 using --tls-crypt-v2 can be made
 to abort with an ASSERT() message by sending a particular combination of authenticated and
 malformed packets. No crypto integrity is violated, no data is leaked, and no remote code
 execution is possible. This bug does not affect OpenVPN clients.

For details refer to https://github.com/OpenVPN/openvpn/blob/v2.6.14/Changes.rst

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
2025-04-04 14:41:46 +02:00
..
files openvpn: fix startup with script-security lower than 2 2024-07-03 12:55:24 -07:00
patches openvpn: update to 2.6.14 2025-04-04 14:41:46 +02:00
Config-mbedtls.in openvpn: update to 2.6.5 and add DCO support 2023-07-24 22:50:06 -07:00
Config-openssl.in openvpn: update to 2.6.5 and add DCO support 2023-07-24 22:50:06 -07:00
Config-wolfssl.in openvpn: update to 2.6.11 2024-06-21 15:28:10 -07:00
Makefile openvpn: update to 2.6.14 2025-04-04 14:41:46 +02:00
test.sh openvpn: update to 2.5.3 2021-06-18 18:13:48 +02:00