From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Sat, 18 Apr 2026 20:23:31 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wEAKJ-00DhGM-2P for lore@lore.pengutronix.de; Sat, 18 Apr 2026 20:23:31 +0200 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1wEAKJ-0007Lk-IN; Sat, 18 Apr 2026 20:23:31 +0200 Received: from mail.ela-soft.com ([213.23.49.162]) by metis.whiteo.stw.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1wEAK0-00075b-VF for ptxdist@pengutronix.de; Sat, 18 Apr 2026 20:23:14 +0200 Received: from tupai.ela-bln.local (tupai.ela-bln.local [10.0.1.140]) by mail.ela-soft.com (mailsystem) with ESMTP id 6AEB223FE2 for ; Sat, 18 Apr 2026 20:23:12 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ela-soft.com; s=2021; t=1776536592; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=GkREg5F3wQjuqPWetPDOPdITuo4feJD0VYNji++BCrg=; b=pUaZgl5HXEqkTRlRi6pLyNiqNM496HJ5E4JCh0Y/XE2MH2jcUS+sS9lFMOF6VxYDXO8NsY eF45wHfE6uiHRUnEKlzTsLQ7LqO2CEXT7pDpDsMBAlPkuHFyiC588qZ+Zq8vprPtAW8hxN aKz18n/ZFhz3scxkjDKYDlNWIIsBLNHwaGb3dWSlUdKk3CCP4o/q3JJ3z+iXWZ1BQLaHLb KUEgjOQ+NPpVu+oMnIVULkP1CnfJOlmuPT23wzezlQklifklUgmWG1kOVapcdeebD8KO9r 5M+qE1sMMiiTQh5U8Ww9l0JxIokAv7K9nc3QDnFh6GyXBDOZJYLYwEsjr1IbCA== Received: by tupai.ela-bln.local (Postfix, from userid 1000) id DB602340478; Sat, 18 Apr 2026 20:23:11 +0200 (CEST) From: Andreas Helmcke To: ptxdist@pengutronix.de Date: Sat, 18 Apr 2026 20:23:03 +0200 Message-ID: <20260418182311.11653-8-ahelmcke@ela-soft.com> X-Mailer: git-send-email 2.51.0 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-102.2 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_VALIDITY_RPBL_BLOCKED, RCVD_IN_VALIDITY_SAFE_BLOCKED,SPF_HELO_NONE,SPF_PASS, USER_IN_WELCOMELIST,USER_IN_WHITELIST autolearn=ham autolearn_force=no version=3.4.2 Subject: [ptxdist] [PATCH] openvpn: Version bump, 2.6.11 -> 2.7.1 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false - security fixes: CVE-2024-5594, CVE-2025-13086, CVE-2025-2704 - various bugfixes and improvements Link: https://github.com/OpenVPN/openvpn/releases/tag/v2.7.1 License changes: Copyright Year, some URLs, additional TAP-Win32/TAP-Win64 Driver license Info Signed-off-by: Andreas Helmcke --- rules/openvpn.make | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/rules/openvpn.make b/rules/openvpn.make index 475f621e7..b0ccbc4f4 100644 --- a/rules/openvpn.make +++ b/rules/openvpn.make @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_OPENVPN) += openvpn # # Paths and names # -OPENVPN_VERSION := 2.6.11 -OPENVPN_MD5 := 467b270c54955681add7f253aa03fc5a +OPENVPN_VERSION := 2.7.1 +OPENVPN_MD5 := bec8a86a22304fa70ca6edb5b27c531c OPENVPN := openvpn-$(OPENVPN_VERSION) OPENVPN_SUFFIX := tar.gz OPENVPN_URL := https://github.com/OpenVPN/openvpn/releases/download/v$(OPENVPN_VERSION)/$(OPENVPN).$(OPENVPN_SUFFIX) @@ -60,7 +60,8 @@ OPENVPN_CONF_OPT := \ --disable-lz4 \ --disable-comp-stub \ --enable-ofb-cfb \ - --disable-x509-alt-username \ + --disable-dns-updown-by-default \ + --disable-ntlm \ --disable-plugins \ --enable-management \ --disable-pkcs11 \ @@ -82,6 +83,7 @@ OPENVPN_CONF_OPT := \ --disable-async-push \ --disable-wolfssl-options-h \ --disable-unit-tests \ + --with-mem-check=no \ --with-crypto-library=openssl \ --with-openssl-engine -- 2.51.0