From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Fri, 24 Apr 2026 11:26:29 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wGCnt-00Fnme-1H for lore@lore.pengutronix.de; Fri, 24 Apr 2026 11:26:29 +0200 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1wGCnt-0004WL-8Z; Fri, 24 Apr 2026 11:26:29 +0200 Received: from drehscheibe.grey.stw.pengutronix.de ([2a0a:edc0:0:c01:1d::a2]) by metis.whiteo.stw.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1wGCna-0004Vt-Pu; Fri, 24 Apr 2026 11:26:10 +0200 Received: from dude05.red.stw.pengutronix.de ([2a0a:edc0:0:1101:1d::54]) by drehscheibe.grey.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wGCna-006yIl-1y; Fri, 24 Apr 2026 11:26:10 +0200 Received: from mol by dude05.red.stw.pengutronix.de with local (Exim 4.98.2) (envelope-from ) id 1wGCna-0000000FQCc-2KW1; Fri, 24 Apr 2026 11:26:10 +0200 Date: Fri, 24 Apr 2026 11:26:10 +0200 From: Michael Olbrich To: Andreas Helmcke Message-ID: References: <20260418182311.11653-8-ahelmcke@ela-soft.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20260418182311.11653-8-ahelmcke@ela-soft.com> X-Sent-From: Pengutronix Hildesheim X-URL: http://www.pengutronix.de/ X-IRC: #ptxdist @freenode X-Accept-Language: de,en X-Accept-Content-Type: text/plain Subject: Re: [ptxdist] [PATCH] openvpn: Version bump, 2.6.11 -> 2.7.1 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Cc: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false On Sat, Apr 18, 2026 at 08:23:03PM +0200, Andreas Helmcke wrote: > - security fixes: CVE-2024-5594, CVE-2025-13086, CVE-2025-2704 > - various bugfixes and improvements > > Link: https://github.com/OpenVPN/openvpn/releases/tag/v2.7.1 > > License changes: Copyright Year, some URLs, additional TAP-Win32/TAP-Win64 Driver license Info You need to update the md5s in OPENVPN_LICENSE_FILES. > > Signed-off-by: Andreas Helmcke > --- > rules/openvpn.make | 8 +++++--- > 1 file changed, 5 insertions(+), 3 deletions(-) > > diff --git a/rules/openvpn.make b/rules/openvpn.make > index 475f621e7..b0ccbc4f4 100644 > --- a/rules/openvpn.make > +++ b/rules/openvpn.make > @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_OPENVPN) += openvpn > # > # Paths and names > # > -OPENVPN_VERSION := 2.6.11 > -OPENVPN_MD5 := 467b270c54955681add7f253aa03fc5a > +OPENVPN_VERSION := 2.7.1 > +OPENVPN_MD5 := bec8a86a22304fa70ca6edb5b27c531c > OPENVPN := openvpn-$(OPENVPN_VERSION) > OPENVPN_SUFFIX := tar.gz > OPENVPN_URL := https://github.com/OpenVPN/openvpn/releases/download/v$(OPENVPN_VERSION)/$(OPENVPN).$(OPENVPN_SUFFIX) > @@ -60,7 +60,8 @@ OPENVPN_CONF_OPT := \ > --disable-lz4 \ > --disable-comp-stub \ > --enable-ofb-cfb \ > - --disable-x509-alt-username \ > + --disable-dns-updown-by-default \ > + --disable-ntlm \ > --disable-plugins \ > --enable-management \ > --disable-pkcs11 \ > @@ -82,6 +83,7 @@ OPENVPN_CONF_OPT := \ > --disable-async-push \ > --disable-wolfssl-options-h \ > --disable-unit-tests \ > + --with-mem-check=no \ > --with-crypto-library=openssl \ > --with-openssl-engine > > -- > 2.51.0 > > > -- Pengutronix e.K. | | Steuerwalder Str. 21 | http://www.pengutronix.de/ | 31137 Hildesheim, Germany | Phone: +49-5121-206917-0 | Amtsgericht Hildesheim, HRA 2686 | Fax: +49-5121-206917-5555 |