* [ptxdist] [PATCH] openvpn: Version bump, 2.6.11 -> 2.7.1
@ 2026-04-18 18:23 Andreas Helmcke
2026-04-24 9:26 ` Michael Olbrich
0 siblings, 1 reply; 3+ messages in thread
From: Andreas Helmcke @ 2026-04-18 18:23 UTC (permalink / raw)
To: ptxdist
- security fixes: CVE-2024-5594, CVE-2025-13086, CVE-2025-2704
- various bugfixes and improvements
Link: https://github.com/OpenVPN/openvpn/releases/tag/v2.7.1
License changes: Copyright Year, some URLs, additional TAP-Win32/TAP-Win64 Driver license Info
Signed-off-by: Andreas Helmcke <ahelmcke@ela-soft.com>
---
rules/openvpn.make | 8 +++++---
1 file changed, 5 insertions(+), 3 deletions(-)
diff --git a/rules/openvpn.make b/rules/openvpn.make
index 475f621e7..b0ccbc4f4 100644
--- a/rules/openvpn.make
+++ b/rules/openvpn.make
@@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_OPENVPN) += openvpn
#
# Paths and names
#
-OPENVPN_VERSION := 2.6.11
-OPENVPN_MD5 := 467b270c54955681add7f253aa03fc5a
+OPENVPN_VERSION := 2.7.1
+OPENVPN_MD5 := bec8a86a22304fa70ca6edb5b27c531c
OPENVPN := openvpn-$(OPENVPN_VERSION)
OPENVPN_SUFFIX := tar.gz
OPENVPN_URL := https://github.com/OpenVPN/openvpn/releases/download/v$(OPENVPN_VERSION)/$(OPENVPN).$(OPENVPN_SUFFIX)
@@ -60,7 +60,8 @@ OPENVPN_CONF_OPT := \
--disable-lz4 \
--disable-comp-stub \
--enable-ofb-cfb \
- --disable-x509-alt-username \
+ --disable-dns-updown-by-default \
+ --disable-ntlm \
--disable-plugins \
--enable-management \
--disable-pkcs11 \
@@ -82,6 +83,7 @@ OPENVPN_CONF_OPT := \
--disable-async-push \
--disable-wolfssl-options-h \
--disable-unit-tests \
+ --with-mem-check=no \
--with-crypto-library=openssl \
--with-openssl-engine
--
2.51.0
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [ptxdist] [PATCH] openvpn: Version bump, 2.6.11 -> 2.7.1
2026-04-18 18:23 [ptxdist] [PATCH] openvpn: Version bump, 2.6.11 -> 2.7.1 Andreas Helmcke
@ 2026-04-24 9:26 ` Michael Olbrich
2026-04-24 11:13 ` [ptxdist] [PATCH v2] " Andreas Helmcke
0 siblings, 1 reply; 3+ messages in thread
From: Michael Olbrich @ 2026-04-24 9:26 UTC (permalink / raw)
To: Andreas Helmcke; +Cc: ptxdist
On Sat, Apr 18, 2026 at 08:23:03PM +0200, Andreas Helmcke wrote:
> - security fixes: CVE-2024-5594, CVE-2025-13086, CVE-2025-2704
> - various bugfixes and improvements
>
> Link: https://github.com/OpenVPN/openvpn/releases/tag/v2.7.1
>
> License changes: Copyright Year, some URLs, additional TAP-Win32/TAP-Win64 Driver license Info
You need to update the md5s in OPENVPN_LICENSE_FILES.
>
> Signed-off-by: Andreas Helmcke <ahelmcke@ela-soft.com>
> ---
> rules/openvpn.make | 8 +++++---
> 1 file changed, 5 insertions(+), 3 deletions(-)
>
> diff --git a/rules/openvpn.make b/rules/openvpn.make
> index 475f621e7..b0ccbc4f4 100644
> --- a/rules/openvpn.make
> +++ b/rules/openvpn.make
> @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_OPENVPN) += openvpn
> #
> # Paths and names
> #
> -OPENVPN_VERSION := 2.6.11
> -OPENVPN_MD5 := 467b270c54955681add7f253aa03fc5a
> +OPENVPN_VERSION := 2.7.1
> +OPENVPN_MD5 := bec8a86a22304fa70ca6edb5b27c531c
> OPENVPN := openvpn-$(OPENVPN_VERSION)
> OPENVPN_SUFFIX := tar.gz
> OPENVPN_URL := https://github.com/OpenVPN/openvpn/releases/download/v$(OPENVPN_VERSION)/$(OPENVPN).$(OPENVPN_SUFFIX)
> @@ -60,7 +60,8 @@ OPENVPN_CONF_OPT := \
> --disable-lz4 \
> --disable-comp-stub \
> --enable-ofb-cfb \
> - --disable-x509-alt-username \
> + --disable-dns-updown-by-default \
> + --disable-ntlm \
> --disable-plugins \
> --enable-management \
> --disable-pkcs11 \
> @@ -82,6 +83,7 @@ OPENVPN_CONF_OPT := \
> --disable-async-push \
> --disable-wolfssl-options-h \
> --disable-unit-tests \
> + --with-mem-check=no \
> --with-crypto-library=openssl \
> --with-openssl-engine
>
> --
> 2.51.0
>
>
>
--
Pengutronix e.K. | |
Steuerwalder Str. 21 | http://www.pengutronix.de/ |
31137 Hildesheim, Germany | Phone: +49-5121-206917-0 |
Amtsgericht Hildesheim, HRA 2686 | Fax: +49-5121-206917-5555 |
^ permalink raw reply [flat|nested] 3+ messages in thread
* [ptxdist] [PATCH v2] openvpn: Version bump, 2.6.11 -> 2.7.1
2026-04-24 9:26 ` Michael Olbrich
@ 2026-04-24 11:13 ` Andreas Helmcke
0 siblings, 0 replies; 3+ messages in thread
From: Andreas Helmcke @ 2026-04-24 11:13 UTC (permalink / raw)
To: ptxdist
- security fixes: CVE-2024-5594, CVE-2025-13086, CVE-2025-2704
- various bugfixes and improvements
Link: https://github.com/OpenVPN/openvpn/releases/tag/v2.7.1
License changes: Copyright Year, some URLs, additional TAP-Win32/TAP-Win64 Driver license Info
Signed-off-by: Andreas Helmcke <ahelmcke@ela-soft.com>
---
v2: updated md5 for COPYING in OPENVPN_LICENSE_FILES
rules/openvpn.make | 10 ++++++----
1 file changed, 6 insertions(+), 4 deletions(-)
diff --git a/rules/openvpn.make b/rules/openvpn.make
index 475f621e7..fddbbccf2 100644
--- a/rules/openvpn.make
+++ b/rules/openvpn.make
@@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_OPENVPN) += openvpn
#
# Paths and names
#
-OPENVPN_VERSION := 2.6.11
-OPENVPN_MD5 := 467b270c54955681add7f253aa03fc5a
+OPENVPN_VERSION := 2.7.1
+OPENVPN_MD5 := bec8a86a22304fa70ca6edb5b27c531c
OPENVPN := openvpn-$(OPENVPN_VERSION)
OPENVPN_SUFFIX := tar.gz
OPENVPN_URL := https://github.com/OpenVPN/openvpn/releases/download/v$(OPENVPN_VERSION)/$(OPENVPN).$(OPENVPN_SUFFIX)
@@ -23,7 +23,7 @@ OPENVPN_SOURCE := $(SRCDIR)/$(OPENVPN).$(OPENVPN_SUFFIX)
OPENVPN_DIR := $(BUILDDIR)/$(OPENVPN)
OPENVPN_LICENSE := GPL-2.0-only WITH (openvpn-openssl-exception AND custom-exception) AND BSD-2-Clause AND BSD-3-Clause AND ((GPL-2.0-only WITH Linux-syscall-note) OR MIT)
OPENVPN_LICENSE_FILES := \
- file://COPYING;md5=89196bacc47ed37a5b242a535661a049 \
+ file://COPYING;md5=924af2c382c415a0a68d0d9e7b483d23 \
file://COPYRIGHT.GPL;md5=52cadf4008002e3c314a47a54fa7306c \
file://src/openvpn/openvpn.c;startline=2;endline=21;md5=80aebe6059f2989b52c49783938e7221 \
file://src/openvpn/base64.c;startline=2;endline=31;md5=f4debd767645b13107fc5912faf2ad8f \
@@ -60,7 +60,8 @@ OPENVPN_CONF_OPT := \
--disable-lz4 \
--disable-comp-stub \
--enable-ofb-cfb \
- --disable-x509-alt-username \
+ --disable-dns-updown-by-default \
+ --disable-ntlm \
--disable-plugins \
--enable-management \
--disable-pkcs11 \
@@ -82,6 +83,7 @@ OPENVPN_CONF_OPT := \
--disable-async-push \
--disable-wolfssl-options-h \
--disable-unit-tests \
+ --with-mem-check=no \
--with-crypto-library=openssl \
--with-openssl-engine
--
2.51.0
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2026-04-24 11:14 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-04-18 18:23 [ptxdist] [PATCH] openvpn: Version bump, 2.6.11 -> 2.7.1 Andreas Helmcke
2026-04-24 9:26 ` Michael Olbrich
2026-04-24 11:13 ` [ptxdist] [PATCH v2] " Andreas Helmcke
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox