CVS commit: pkgsrc/net

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Fri Jun 21 03:36:33 UTC 2024

Modified Files:
        pkgsrc/net/openvpn: Makefile Makefile.common distinfo
        pkgsrc/net/openvpn-acct-wtmpx: distinfo
        pkgsrc/net/openvpn-nagios: distinfo

Log Message:
openvpn: updated to 2.6.11

v2.6.11

Security fixes:

CVE-2024-4877: Windows: harden interactive service pipe.
Security scope: a malicious process with "some" elevated privileges
(SeImpersonatePrivilege) could open the pipe a second time, tricking
openvn GUI into providing user credentials (tokens), getting full
access to the account openvpn-gui.exe runs as.
(Zeze with TeamT5)
CVE-2024-5594: control channel: refuse control channel messages with
nonprintable characters in them. Security scope: a malicious openvpn
peer can send garbage to openvpn log, or cause high CPU load.
(Reynir Björnsson)
CVE-2024-28882: only call schedule_exit() once (on a given peer).
Security scope: an authenticated client can make the server "keep the
session" even when the server has been told to disconnect this client
(Reynir Björnsson)

New features:

Windows Crypto-API: Implement Windows CA template match for searching
certificates in windows crypto store.
Support pre-created DCO interface on FreeBSD (OpenVPN would fail to
set ifmode p2p/subnet otherwise)

Bug fixes:

Fix connect timeout when using SOCKS proxies
Work around LibreSSL crashing on OpenBSD 7.5 when enumerating ciphers
Add bracket in fingerprint message and do not warn about missing
verification

Documentation:

Remove "experimental" denotation for --fast-io
Correctly document ifconfig_* variables passed to scripts
Documentation: make section levels consistent
Samples: Update sample configurations (remove compression & old cipher settings, add more informative comments)


To generate a diff of this commit:
cvs rdiff -u -r1.104 -r1.105 pkgsrc/net/openvpn/Makefile
cvs rdiff -u -r1.37 -r1.38 pkgsrc/net/openvpn/Makefile.common
cvs rdiff -u -r1.68 -r1.69 pkgsrc/net/openvpn/distinfo
cvs rdiff -u -r1.43 -r1.44 pkgsrc/net/openvpn-acct-wtmpx/distinfo
cvs rdiff -u -r1.40 -r1.41 pkgsrc/net/openvpn-nagios/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/openvpn/Makefile
diff -u pkgsrc/net/openvpn/Makefile:1.104 pkgsrc/net/openvpn/Makefile:1.105
--- pkgsrc/net/openvpn/Makefile:1.104   Wed May 29 16:34:00 2024
+++ pkgsrc/net/openvpn/Makefile Fri Jun 21 03:36:32 2024
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.104 2024/05/29 16:34:00 adam Exp $
+# $NetBSD: Makefile,v 1.105 2024/06/21 03:36:32 adam Exp $
 
 DISTNAME=      ${OPENVPN_DISTNAME}
-PKGREVISION=   2
 CATEGORIES=    net
 MASTER_SITES=  ${OPENVPN_MASTER_SITES}
 

Index: pkgsrc/net/openvpn/Makefile.common
diff -u pkgsrc/net/openvpn/Makefile.common:1.37 pkgsrc/net/openvpn/Makefile.common:1.38
--- pkgsrc/net/openvpn/Makefile.common:1.37     Wed Mar 20 19:24:02 2024
+++ pkgsrc/net/openvpn/Makefile.common  Fri Jun 21 03:36:32 2024
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile.common,v 1.37 2024/03/20 19:24:02 adam Exp $
+# $NetBSD: Makefile.common,v 1.38 2024/06/21 03:36:32 adam Exp $
 # used by net/openvpn/Makefile
 # used by net/openvpn-acct-wtmpx/Makefile
 # used by net/openvpn-nagios/Makefile
 
-OPENVPN_DISTNAME=              openvpn-2.6.10
+OPENVPN_DISTNAME=              openvpn-2.6.11
 OPENVPN_DISTFILE=              ${OPENVPN_DISTNAME}.tar.gz
 OPENVPN_MASTER_SITES=          https://swupdate.openvpn.org/community/releases/
 SITES.${OPENVPN_DISTFILE}=     ${OPENVPN_MASTER_SITES}

Index: pkgsrc/net/openvpn/distinfo
diff -u pkgsrc/net/openvpn/distinfo:1.68 pkgsrc/net/openvpn/distinfo:1.69
--- pkgsrc/net/openvpn/distinfo:1.68    Wed Mar 20 19:24:02 2024
+++ pkgsrc/net/openvpn/distinfo Fri Jun 21 03:36:32 2024
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.68 2024/03/20 19:24:02 adam Exp $
+$NetBSD: distinfo,v 1.69 2024/06/21 03:36:32 adam Exp $
 
-BLAKE2s (openvpn-2.6.10.tar.gz) = 1c007356e393c9e9ea1d96c24943a955805f8e96bb3a8c89531c3bbcc3ff53b4
-SHA512 (openvpn-2.6.10.tar.gz) = 2220d453db5b1e00cdddc4f7417eeb39ac7089e951c0cfb39da461f525517dbe94802ae1fb4625997fc8dec22c8359427da05618db4fb64d3e9fdcf0cb2ee861
-Size (openvpn-2.6.10.tar.gz) = 1907280 bytes
+BLAKE2s (openvpn-2.6.11.tar.gz) = 3658bf7d2fe005d59fcbdf5feff64c9d12cc7e815f4b9e1901395838f6df014a
+SHA512 (openvpn-2.6.11.tar.gz) = 07110831a195863db31c26aa70fc43ac74e98d9e04a2f62c7a1183ce8b2b5c84da5f3a3b98fb0c868a184f92b9d8e1201705412de881341920c564a05ed560e0
+Size (openvpn-2.6.11.tar.gz) = 1907454 bytes
 SHA1 (patch-src_compat_compat-basename.c) = c5cd48db40279a956ada044a81e6dfab015d70b6

Index: pkgsrc/net/openvpn-acct-wtmpx/distinfo
diff -u pkgsrc/net/openvpn-acct-wtmpx/distinfo:1.43 pkgsrc/net/openvpn-acct-wtmpx/distinfo:1.44
--- pkgsrc/net/openvpn-acct-wtmpx/distinfo:1.43 Wed Mar 20 19:24:02 2024
+++ pkgsrc/net/openvpn-acct-wtmpx/distinfo      Fri Jun 21 03:36:33 2024
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.43 2024/03/20 19:24:02 adam Exp $
+$NetBSD: distinfo,v 1.44 2024/06/21 03:36:33 adam Exp $
 
-BLAKE2s (openvpn-2.6.10.tar.gz) = 1c007356e393c9e9ea1d96c24943a955805f8e96bb3a8c89531c3bbcc3ff53b4
-SHA512 (openvpn-2.6.10.tar.gz) = 2220d453db5b1e00cdddc4f7417eeb39ac7089e951c0cfb39da461f525517dbe94802ae1fb4625997fc8dec22c8359427da05618db4fb64d3e9fdcf0cb2ee861
-Size (openvpn-2.6.10.tar.gz) = 1907280 bytes
+BLAKE2s (openvpn-2.6.11.tar.gz) = 3658bf7d2fe005d59fcbdf5feff64c9d12cc7e815f4b9e1901395838f6df014a
+SHA512 (openvpn-2.6.11.tar.gz) = 07110831a195863db31c26aa70fc43ac74e98d9e04a2f62c7a1183ce8b2b5c84da5f3a3b98fb0c868a184f92b9d8e1201705412de881341920c564a05ed560e0
+Size (openvpn-2.6.11.tar.gz) = 1907454 bytes
 BLAKE2s (openvpn-acct-wtmpx-20130210.tgz) = 2bb02a4e6adb7ce1d189271a6fbb6cbffd6a37d7b5e75cccebfc8dfac6dbaddd
 SHA512 (openvpn-acct-wtmpx-20130210.tgz) = 7b8fd4929e65d8d84158f62e5a17ff3adb3b4a6cff63b29038acfb368750719f2f593786ed9b02402824c19d872b188d2a46740a5c5f853e8873a71481b13aaf
 Size (openvpn-acct-wtmpx-20130210.tgz) = 2778 bytes

Index: pkgsrc/net/openvpn-nagios/distinfo
diff -u pkgsrc/net/openvpn-nagios/distinfo:1.40 pkgsrc/net/openvpn-nagios/distinfo:1.41
--- pkgsrc/net/openvpn-nagios/distinfo:1.40     Wed Mar 20 19:24:02 2024
+++ pkgsrc/net/openvpn-nagios/distinfo  Fri Jun 21 03:36:33 2024
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.40 2024/03/20 19:24:02 adam Exp $
+$NetBSD: distinfo,v 1.41 2024/06/21 03:36:33 adam Exp $
 
-BLAKE2s (openvpn-2.6.10.tar.gz) = 1c007356e393c9e9ea1d96c24943a955805f8e96bb3a8c89531c3bbcc3ff53b4
-SHA512 (openvpn-2.6.10.tar.gz) = 2220d453db5b1e00cdddc4f7417eeb39ac7089e951c0cfb39da461f525517dbe94802ae1fb4625997fc8dec22c8359427da05618db4fb64d3e9fdcf0cb2ee861
-Size (openvpn-2.6.10.tar.gz) = 1907280 bytes
+BLAKE2s (openvpn-2.6.11.tar.gz) = 3658bf7d2fe005d59fcbdf5feff64c9d12cc7e815f4b9e1901395838f6df014a
+SHA512 (openvpn-2.6.11.tar.gz) = 07110831a195863db31c26aa70fc43ac74e98d9e04a2f62c7a1183ce8b2b5c84da5f3a3b98fb0c868a184f92b9d8e1201705412de881341920c564a05ed560e0
+Size (openvpn-2.6.11.tar.gz) = 1907454 bytes
 BLAKE2s (openvpn-nagios-20130210.tgz) = 713b55e865350c44a314aa3b48694695f4d82b50883d1fae919f01e9545c7c34
 SHA512 (openvpn-nagios-20130210.tgz) = 80e565f32379c39eb6c7f3b4744af221ae882ff07dce9dae5bd7feb73b0edcfc7c7ac7f70d23fdcd4f492b66f095f09833deb122449840b36ea606ce91900358
 Size (openvpn-nagios-20130210.tgz) = 3034 bytes