From patchwork Sat Sep 30 15:41:56 2017 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Matthias Fischer X-Patchwork-Id: 1433 Return-Path: Received: from mail01.ipfire.org (unknown [172.28.1.200]) by web02.ipfire.org (Postfix) with ESMTP id 1CF8860C99 for ; Sat, 30 Sep 2017 07:42:07 +0200 (CEST) Received: from mail01.ipfire.org (localhost [IPv6:::1]) by mail01.ipfire.org (Postfix) with ESMTP id 4653C259A; Sat, 30 Sep 2017 07:42:05 +0200 (CEST) Received: from Devel.localdomain (p5DD83A95.dip0.t-ipconnect.de [93.216.58.149]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 5FB042485 for ; Sat, 30 Sep 2017 07:42:02 +0200 (CEST) From: Matthias Fischer To: development@lists.ipfire.org Subject: [PATCH] openvpn: Update to 2.3.18 Date: Sat, 30 Sep 2017 07:41:56 +0200 Message-Id: <20170930054156.21034-1-matthias.fischer@ipfire.org> X-Mailer: git-send-email 2.14.2 X-BeenThere: development@lists.ipfire.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: IPFire development talk List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: development-bounces@lists.ipfire.org Sender: "Development" Fixes CVE-2017-12166: out of bounds write in key-method 1 For details see: https://community.openvpn.net/openvpn/wiki/CVE-2017-12166 Changelog: https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn23#OpenVPN2.3.18 Removed an unrecognized 'configure'-option. Best, Matthias Signed-off-by: Matthias Fischer --- lfs/openvpn | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/lfs/openvpn b/lfs/openvpn index b7f521759..8307d0147 100644 --- a/lfs/openvpn +++ b/lfs/openvpn @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2015 IPFire Team # +# Copyright (C) 2017 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 2.3.17 +VER = 2.3.18 THISAPP = openvpn-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = df9291c5bd466fe73c2544a800f3b441 +$(DL_FILE)_MD5 = 844ec9c64aae62051478784b8562f881 install : $(TARGET) @@ -74,7 +74,6 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) --prefix=/usr \ --sysconfdir=/var/ipfire/ovpn \ --enable-iproute2 \ - --enable-password-save \ --enable-plugins \ --enable-plugin-auth-pam \ --enable-plugin-down-root