CVS commit: pkgsrc/net

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Thu Jan 16 06:30:38 UTC 2025

Modified Files:
        pkgsrc/net/openvpn: Makefile Makefile.common distinfo
        pkgsrc/net/openvpn-acct-wtmpx: distinfo
        pkgsrc/net/openvpn-nagios: distinfo

Log Message:
openvpn: updated to 2.6.13

Overview of changes in 2.6.13
=============================
New features
------------
- on non-windows clients (MacOS, Linux, Unix) send "release" string from
  uname() call as IV_PLAT_VER= to server - while highly OS specific this
  is still helpful to keep track of OS versions used on the client side

- Windows: protect cached username, password and token in client memory
  (using the CryptProtectMemory() windows API

- Windows: use new API to get dco-win driver version from driver
  (newly introduced non-exclusive control device)

- Linux: pass --timeout=0 argument to systemd-ask-password, to avoid
  default timeout of 90 seconds ("console prompting also has no timeout")

Bug fixes
---------
- fix potentially unaligned access in drop_if_recursive_routing on
  Linux (ASAN)

- correct documentation for port-share journal

- fix logging of IPv6 addresses in port-share journal

- fix various typos in messages, documentation, comments and examples

- FreeBSD DCO: fix memory leaks in nvlist handling

- route handling: correctly handle case of "route installation fails"
  in the face of an already-existing route - previously, OpenVPN would
  remove the "other" route on exit, incorrectly changing system state.

- fix generation of warning messages for overlapping --local/--remote
  and --ifconfig addresses

- purge proxy authentication credentials from memory after use
  (if --auth-nocache is in use)

- fix missing space in various (long and wrapped) msg() calls

Code maintenance
----------------
- improve documentation/examples for <peer-fingerprint> feature

- simplify Github Action macOS build setup

- update Github Action macOS runners (remove macOS 12, add macOS 15)

- fix a number of uninitialized "struct user_pass" local variables
  (no impact beyond "compiler warning", but future-proofing the code)

Security fixes
--------------
- improve server-side handling of clients sending usernames or passwords
  longer than USER_PASS_LEN - this would not result in a crash, buffer
  overflow or other security issues, but the server would then misparse
  incoming IV_* variables and produce misleading error messages.


To generate a diff of this commit:
cvs rdiff -u -r1.108 -r1.109 pkgsrc/net/openvpn/Makefile
cvs rdiff -u -r1.39 -r1.40 pkgsrc/net/openvpn/Makefile.common
cvs rdiff -u -r1.70 -r1.71 pkgsrc/net/openvpn/distinfo
cvs rdiff -u -r1.45 -r1.46 pkgsrc/net/openvpn-acct-wtmpx/distinfo
cvs rdiff -u -r1.42 -r1.43 pkgsrc/net/openvpn-nagios/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/openvpn/Makefile
diff -u pkgsrc/net/openvpn/Makefile:1.108 pkgsrc/net/openvpn/Makefile:1.109
--- pkgsrc/net/openvpn/Makefile:1.108   Thu Nov 14 22:21:14 2024
+++ pkgsrc/net/openvpn/Makefile Thu Jan 16 06:30:38 2025
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.108 2024/11/14 22:21:14 wiz Exp $
+# $NetBSD: Makefile,v 1.109 2025/01/16 06:30:38 adam Exp $
 
 DISTNAME=      ${OPENVPN_DISTNAME}
-PKGREVISION=   3
 CATEGORIES=    net
 MASTER_SITES=  ${OPENVPN_MASTER_SITES}
 

Index: pkgsrc/net/openvpn/Makefile.common
diff -u pkgsrc/net/openvpn/Makefile.common:1.39 pkgsrc/net/openvpn/Makefile.common:1.40
--- pkgsrc/net/openvpn/Makefile.common:1.39     Thu Jul 18 13:00:07 2024
+++ pkgsrc/net/openvpn/Makefile.common  Thu Jan 16 06:30:38 2025
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile.common,v 1.39 2024/07/18 13:00:07 adam Exp $
+# $NetBSD: Makefile.common,v 1.40 2025/01/16 06:30:38 adam Exp $
 # used by net/openvpn/Makefile
 # used by net/openvpn-acct-wtmpx/Makefile
 # used by net/openvpn-nagios/Makefile
 
-OPENVPN_DISTNAME=              openvpn-2.6.12
+OPENVPN_DISTNAME=              openvpn-2.6.13
 OPENVPN_DISTFILE=              ${OPENVPN_DISTNAME}.tar.gz
 OPENVPN_MASTER_SITES=          https://swupdate.openvpn.org/community/releases/
 SITES.${OPENVPN_DISTFILE}=     ${OPENVPN_MASTER_SITES}

Index: pkgsrc/net/openvpn/distinfo
diff -u pkgsrc/net/openvpn/distinfo:1.70 pkgsrc/net/openvpn/distinfo:1.71
--- pkgsrc/net/openvpn/distinfo:1.70    Thu Jul 18 13:00:07 2024
+++ pkgsrc/net/openvpn/distinfo Thu Jan 16 06:30:38 2025
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.70 2024/07/18 13:00:07 adam Exp $
+$NetBSD: distinfo,v 1.71 2025/01/16 06:30:38 adam Exp $
 
-BLAKE2s (openvpn-2.6.12.tar.gz) = 28ccfffe8ec1f7d286c7fe5602217333523fdf9f1ca907c48fb96a9ca68e7d40
-SHA512 (openvpn-2.6.12.tar.gz) = 92f548186d9375d6ae47b1387dd191241b8a45aed82294523b3771bdd5e699b94265e1a3bbf3ef2638da0d54c19c783f54c456cbd755c846849bf67913cad6db
-Size (openvpn-2.6.12.tar.gz) = 1912400 bytes
+BLAKE2s (openvpn-2.6.13.tar.gz) = cea799d0831eea6ee6eb315953d97dd9328fb17a6a1624d186211d77e7339c95
+SHA512 (openvpn-2.6.13.tar.gz) = 26a6c417e3d753e0845fc4ef92c5e5a6befedc3e830dc5e9236f5664ef9f4fffb6bc7c59db53567fb4bbb1f1c47860f5caa10b82e86daa6b2e12734f940a1e13
+Size (openvpn-2.6.13.tar.gz) = 1911719 bytes
 SHA1 (patch-src_compat_compat-basename.c) = c5cd48db40279a956ada044a81e6dfab015d70b6

Index: pkgsrc/net/openvpn-acct-wtmpx/distinfo
diff -u pkgsrc/net/openvpn-acct-wtmpx/distinfo:1.45 pkgsrc/net/openvpn-acct-wtmpx/distinfo:1.46
--- pkgsrc/net/openvpn-acct-wtmpx/distinfo:1.45 Thu Jul 18 13:00:07 2024
+++ pkgsrc/net/openvpn-acct-wtmpx/distinfo      Thu Jan 16 06:30:38 2025
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.45 2024/07/18 13:00:07 adam Exp $
+$NetBSD: distinfo,v 1.46 2025/01/16 06:30:38 adam Exp $
 
-BLAKE2s (openvpn-2.6.12.tar.gz) = 28ccfffe8ec1f7d286c7fe5602217333523fdf9f1ca907c48fb96a9ca68e7d40
-SHA512 (openvpn-2.6.12.tar.gz) = 92f548186d9375d6ae47b1387dd191241b8a45aed82294523b3771bdd5e699b94265e1a3bbf3ef2638da0d54c19c783f54c456cbd755c846849bf67913cad6db
-Size (openvpn-2.6.12.tar.gz) = 1912400 bytes
+BLAKE2s (openvpn-2.6.13.tar.gz) = cea799d0831eea6ee6eb315953d97dd9328fb17a6a1624d186211d77e7339c95
+SHA512 (openvpn-2.6.13.tar.gz) = 26a6c417e3d753e0845fc4ef92c5e5a6befedc3e830dc5e9236f5664ef9f4fffb6bc7c59db53567fb4bbb1f1c47860f5caa10b82e86daa6b2e12734f940a1e13
+Size (openvpn-2.6.13.tar.gz) = 1911719 bytes
 BLAKE2s (openvpn-acct-wtmpx-20130210.tgz) = 2bb02a4e6adb7ce1d189271a6fbb6cbffd6a37d7b5e75cccebfc8dfac6dbaddd
 SHA512 (openvpn-acct-wtmpx-20130210.tgz) = 7b8fd4929e65d8d84158f62e5a17ff3adb3b4a6cff63b29038acfb368750719f2f593786ed9b02402824c19d872b188d2a46740a5c5f853e8873a71481b13aaf
 Size (openvpn-acct-wtmpx-20130210.tgz) = 2778 bytes

Index: pkgsrc/net/openvpn-nagios/distinfo
diff -u pkgsrc/net/openvpn-nagios/distinfo:1.42 pkgsrc/net/openvpn-nagios/distinfo:1.43
--- pkgsrc/net/openvpn-nagios/distinfo:1.42     Thu Jul 18 13:00:07 2024
+++ pkgsrc/net/openvpn-nagios/distinfo  Thu Jan 16 06:30:38 2025
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.42 2024/07/18 13:00:07 adam Exp $
+$NetBSD: distinfo,v 1.43 2025/01/16 06:30:38 adam Exp $
 
-BLAKE2s (openvpn-2.6.12.tar.gz) = 28ccfffe8ec1f7d286c7fe5602217333523fdf9f1ca907c48fb96a9ca68e7d40
-SHA512 (openvpn-2.6.12.tar.gz) = 92f548186d9375d6ae47b1387dd191241b8a45aed82294523b3771bdd5e699b94265e1a3bbf3ef2638da0d54c19c783f54c456cbd755c846849bf67913cad6db
-Size (openvpn-2.6.12.tar.gz) = 1912400 bytes
+BLAKE2s (openvpn-2.6.13.tar.gz) = cea799d0831eea6ee6eb315953d97dd9328fb17a6a1624d186211d77e7339c95
+SHA512 (openvpn-2.6.13.tar.gz) = 26a6c417e3d753e0845fc4ef92c5e5a6befedc3e830dc5e9236f5664ef9f4fffb6bc7c59db53567fb4bbb1f1c47860f5caa10b82e86daa6b2e12734f940a1e13
+Size (openvpn-2.6.13.tar.gz) = 1911719 bytes
 BLAKE2s (openvpn-nagios-20130210.tgz) = 713b55e865350c44a314aa3b48694695f4d82b50883d1fae919f01e9545c7c34
 SHA512 (openvpn-nagios-20130210.tgz) = 80e565f32379c39eb6c7f3b4744af221ae882ff07dce9dae5bd7feb73b0edcfc7c7ac7f70d23fdcd4f492b66f095f09833deb122449840b36ea606ce91900358
 Size (openvpn-nagios-20130210.tgz) = 3034 bytes