From patchwork Fri Dec 5 19:24:43 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Adolf Belka X-Patchwork-Id: 9358 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "R12" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4dNLtG4hRPz3wpF for ; Fri, 05 Dec 2025 19:24:54 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail02.haj.ipfire.org", Issuer "E8" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4dNLtF4RtRz6L9 for ; Fri, 05 Dec 2025 19:24:53 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4dNLtC6CHjz33dC for ; Fri, 05 Dec 2025 19:24:51 +0000 (UTC) X-Original-To: development@lists.ipfire.org Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "R12" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4dNLt90QHrz2y1f for ; Fri, 05 Dec 2025 19:24:49 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4dNLt85rlzz40c; Fri, 05 Dec 2025 19:24:48 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1764962688; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=cpzGCVYOJCe558dwQlyNq+PJOyoPhh+Z82EWXRBGA+Y=; b=iwjFqC1McGrplTY4tJdBJ4ciiZEwHw98Wd5kWvlnzVeA/5QVSnS90KR8uFGKhjR9SZX1xG tQvdSZX1uimJ3VPed8AFm4A7Bk/iIIMWOCrMzq8FMjbf+9cgUhsh3xj3OAp8BTyS7DDa4z 4zUeKe2PuO4OXsnf2O14sDvyu94RTqe5lt49dM4DAZdDVthnjyGreQlZQzsTN5IHPmZ56t j+Blyp4S+aDA7EH4Dy+oQRu6aa7/QU+SeSltQ2vodLgbeyFCBRa4nxlquVh4iNsjj0ZmIu zFyPVKHfSgs+G1UcpEZfeoT8u4A6W1pHsQgC6Mk4L40g8blmBlIvMhfACYuJ+A== DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1764962688; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=cpzGCVYOJCe558dwQlyNq+PJOyoPhh+Z82EWXRBGA+Y=; b=GH8Ydh64kqePfZP2fFEOTjVQjHNmNtTs8d18PHP0fL1rcP4mzhFwuA9q65/aaRAkEY+u1a 3Y96gd9ymCxVdoAg== From: Adolf Belka To: development@lists.ipfire.org Cc: Adolf Belka Subject: [PATCH] openvpn: Update to version 2.6.17 Date: Fri, 5 Dec 2025 20:24:43 +0100 Message-ID: <20251205192443.3558213-4-adolf.belka@ipfire.org> In-Reply-To: <20251205192443.3558213-1-adolf.belka@ipfire.org> References: <20251205192443.3558213-1-adolf.belka@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 - Update from 2.6.16 to 2.6.17 - No change to rootfile - Changelog 2.6.17 Security fixes: CVE-2025-13751: Windows/interactive service: fix erroneous exit on error that could be used by a local Windows users to achieve a local denial-of-service Bug fixes: Windows/interactive service: improve service pipe robustness against file access races (uuid) and access by unauthorized processes (ACL). upgrade bundled build instruction (vcpkg and patch) for pkcs11-helper to 1.31, fixing a parser bug Windows MSI changes since 2.6.16-I001: Built against OpenSSL 3.6.0 Included openvpn-gui updated to 11.59.0.0 Authorize config before opening the service pipe Remove dependence on pathcch.dll not in Windows 7 Included win-dco driver updated to 2.8.0 Signed-off-by: Adolf Belka --- lfs/openvpn | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/openvpn b/lfs/openvpn index 9252c44f8..25e186f12 100644 --- a/lfs/openvpn +++ b/lfs/openvpn @@ -24,7 +24,7 @@ include Config -VER = 2.6.16 +VER = 2.6.17 THISAPP = openvpn-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = d4219d5974ecb0d73b865f436ed5a57874dee7295446a10d47354024564a25098ea2210f3356f3938fd24fb99c2310797bb70936ad5423eafad7cbacc94c71c5 +$(DL_FILE)_BLAKE2 = a5cff9bf4de85b647bd0cef808586b2cd29694ad0134ae6e4b3f74251c2ce0908cf86cbc041768f7fbc495e3ad5c5dbb9c491fe351b99da330dd2390142b353e install : $(TARGET)