[source] openvpn: update to v2.4.2

LEDE Commits lede-commits at lists.infradead.org
Fri May 12 02:54:58 PDT 2017


jow pushed a commit to source.git, branch master:
https://git.lede-project.org/e66f17ac1e9579cf08448c439a770dcd1d00d080

commit e66f17ac1e9579cf08448c439a770dcd1d00d080
Author: Jo-Philipp Wich <jo at mein.io>
AuthorDate: Fri May 12 11:48:58 2017 +0200

    openvpn: update to v2.4.2
    
    Update to version 2.4.2 in order to address two potential Denial-of-Service
    vectors in OpenVPN.
    
    CVE-2017-7478 - Don't assert out on receiving too-large control packets
    CVE-2017-7479 - Drop packets instead of assert out if packet id rolls over
    
    Ref: https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24#OpenVPN2.4.2
    Ref: https://community.openvpn.net/openvpn/wiki/QuarkslabAndCryptographyEngineerAudits
    
    Signed-off-by: Jo-Philipp Wich <jo at mein.io>
---
 package/network/services/openvpn/Makefile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/package/network/services/openvpn/Makefile b/package/network/services/openvpn/Makefile
index adce897..ea3ac3d 100644
--- a/package/network/services/openvpn/Makefile
+++ b/package/network/services/openvpn/Makefile
@@ -9,14 +9,14 @@ include $(TOPDIR)/rules.mk
 
 PKG_NAME:=openvpn
 
-PKG_VERSION:=2.4.1
+PKG_VERSION:=2.4.2
 PKG_RELEASE:=1
 
 PKG_SOURCE_URL:=\
 	https://build.openvpn.net/downloads/releases/ \
 	https://swupdate.openvpn.net/community/releases/
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
-PKG_HASH:=fde9e22c6df7a335d2d58c6a4d5967be76df173c766a5c51ece57fd044c76ee5
+PKG_HASH:=df5c4f384b7df6b08a2f6fa8a84b9fd382baf59c2cef1836f82e2a7f62f1bff9
 
 PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_NAME)-$(PKG_VERSION)
 PKG_MAINTAINER:=Felix Fietkau <nbd at nbd.name>



More information about the lede-commits mailing list