openvpn: Update to 2.3.18

Message ID 20170930054156.21034-1-matthias.fischer@ipfire.org
State Dropped
Commit 67970637d0965ee01255a4d3a27dfa186c57f54c
Headers
Series openvpn: Update to 2.3.18 |

Commit Message

Matthias Fischer Sept. 30, 2017, 3:41 p.m. UTC
  Fixes CVE-2017-12166: out of bounds write in key-method 1

For details see:

https://community.openvpn.net/openvpn/wiki/CVE-2017-12166

Changelog:
https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn23#OpenVPN2.3.18

Removed an unrecognized 'configure'-option.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
---
 lfs/openvpn | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)
  

Patch

diff --git a/lfs/openvpn b/lfs/openvpn
index b7f521759..8307d0147 100644
--- a/lfs/openvpn
+++ b/lfs/openvpn
@@ -1,7 +1,7 @@ 
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2015  IPFire Team  <info@ipfire.org>                          #
+# Copyright (C) 2017  IPFire Team  <info@ipfire.org>                          #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,7 +24,7 @@ 
 
 include Config
 
-VER        = 2.3.17
+VER        = 2.3.18
 
 THISAPP    = openvpn-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@  objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_MD5 = df9291c5bd466fe73c2544a800f3b441
+$(DL_FILE)_MD5 = 844ec9c64aae62051478784b8562f881
 
 install : $(TARGET)
 
@@ -74,7 +74,6 @@  $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 		--prefix=/usr \
 		--sysconfdir=/var/ipfire/ovpn \
 		--enable-iproute2 \
-		--enable-password-save \
 		--enable-plugins \
 		--enable-plugin-auth-pam \
 		--enable-plugin-down-root