CVS commit: pkgsrc/net

["Greg Troxel" <gdt%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   gdt
Date:           Wed Nov 19 00:14:21 UTC 2025

Modified Files:
        pkgsrc/net/openvpn: Makefile.common distinfo
        pkgsrc/net/openvpn-acct-wtmpx: Makefile distinfo
        pkgsrc/net/openvpn-nagios: Makefile distinfo

Log Message:
net/openvpn*: Update to 2.6.16

This is a bugfix release containing one security fix.

Security fixes:

* CVE-2025-13086: Fix memcmp check for the hmac verification in the 3way handshake.
  This bug renders the HMAC based protection against state exhaustion on
  receiving spoofed TLS handshake packets in the OpenVPN server inefficient.


To generate a diff of this commit:
cvs rdiff -u -r1.42 -r1.43 pkgsrc/net/openvpn/Makefile.common
cvs rdiff -u -r1.73 -r1.74 pkgsrc/net/openvpn/distinfo
cvs rdiff -u -r1.18 -r1.19 pkgsrc/net/openvpn-acct-wtmpx/Makefile
cvs rdiff -u -r1.48 -r1.49 pkgsrc/net/openvpn-acct-wtmpx/distinfo
cvs rdiff -u -r1.18 -r1.19 pkgsrc/net/openvpn-nagios/Makefile
cvs rdiff -u -r1.45 -r1.46 pkgsrc/net/openvpn-nagios/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/openvpn/Makefile.common
diff -u pkgsrc/net/openvpn/Makefile.common:1.42 pkgsrc/net/openvpn/Makefile.common:1.43
--- pkgsrc/net/openvpn/Makefile.common:1.42     Wed Sep 24 17:06:43 2025
+++ pkgsrc/net/openvpn/Makefile.common  Wed Nov 19 00:14:21 2025
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile.common,v 1.42 2025/09/24 17:06:43 gdt Exp $
+# $NetBSD: Makefile.common,v 1.43 2025/11/19 00:14:21 gdt Exp $
 # used by net/openvpn/Makefile
 # used by net/openvpn-acct-wtmpx/Makefile
 # used by net/openvpn-nagios/Makefile
 
-OPENVPN_DISTNAME=              openvpn-2.6.15
+OPENVPN_DISTNAME=              openvpn-2.6.16
 OPENVPN_DISTFILE=              ${OPENVPN_DISTNAME}.tar.gz
 OPENVPN_MASTER_SITES=          https://swupdate.openvpn.org/community/releases/
 SITES.${OPENVPN_DISTFILE}=     ${OPENVPN_MASTER_SITES}

Index: pkgsrc/net/openvpn/distinfo
diff -u pkgsrc/net/openvpn/distinfo:1.73 pkgsrc/net/openvpn/distinfo:1.74
--- pkgsrc/net/openvpn/distinfo:1.73    Wed Sep 24 17:06:43 2025
+++ pkgsrc/net/openvpn/distinfo Wed Nov 19 00:14:21 2025
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.73 2025/09/24 17:06:43 gdt Exp $
+$NetBSD: distinfo,v 1.74 2025/11/19 00:14:21 gdt Exp $
 
-BLAKE2s (openvpn-2.6.15.tar.gz) = 523d7b23b325b6bf72b39bcbb90d103ae964aed57f2c27c88ed2dfe90813fd77
-SHA512 (openvpn-2.6.15.tar.gz) = 14fde7894ddd9cf4aef28d603fcc8e7a7bebc7f5ab38ce07b3f39faa135a225b5307fb8989ebef772a3dec11e17242e05dbf69d26d83e93a44585ad25a8b2a4f
-Size (openvpn-2.6.15.tar.gz) = 1917742 bytes
+BLAKE2s (openvpn-2.6.16.tar.gz) = 5d4a83e4351b2f2c6c8a2475b6cdce492ebc9cad864320e7aa08d7f2a9d2e59d
+SHA512 (openvpn-2.6.16.tar.gz) = 63df1416dc70c34e20c3bc56b0f56ed7eadb788378fa585ed2b19fd1f1b9ce39f6f64b44ac08cb0f5c39a054b2e33ae62b31f83f72211c8f2ffa4d562bc5545b
+Size (openvpn-2.6.16.tar.gz) = 1933428 bytes
 SHA1 (patch-src_compat_compat-basename.c) = c5cd48db40279a956ada044a81e6dfab015d70b6

Index: pkgsrc/net/openvpn-acct-wtmpx/Makefile
diff -u pkgsrc/net/openvpn-acct-wtmpx/Makefile:1.18 pkgsrc/net/openvpn-acct-wtmpx/Makefile:1.19
--- pkgsrc/net/openvpn-acct-wtmpx/Makefile:1.18 Wed Sep 24 17:08:01 2025
+++ pkgsrc/net/openvpn-acct-wtmpx/Makefile      Wed Nov 19 00:14:21 2025
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile,v 1.18 2025/09/24 17:08:01 gdt Exp $
+# $NetBSD: Makefile,v 1.19 2025/11/19 00:14:21 gdt Exp $
 
 .include "../../net/openvpn/Makefile.common"
 
 DISTNAME=      openvpn-acct-wtmpx-20130210
-PKGREVISION=   7
+PKGREVISION=   8
 DISTFILES=     ${DISTNAME}${EXTRACT_SUFX} ${OPENVPN_DISTFILE}
 CATEGORIES=    net
 MASTER_SITES=  http://ftp.espci.fr/pub/openvpn-acct-wtmpx/

Index: pkgsrc/net/openvpn-acct-wtmpx/distinfo
diff -u pkgsrc/net/openvpn-acct-wtmpx/distinfo:1.48 pkgsrc/net/openvpn-acct-wtmpx/distinfo:1.49
--- pkgsrc/net/openvpn-acct-wtmpx/distinfo:1.48 Wed Sep 24 17:08:01 2025
+++ pkgsrc/net/openvpn-acct-wtmpx/distinfo      Wed Nov 19 00:14:21 2025
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.48 2025/09/24 17:08:01 gdt Exp $
+$NetBSD: distinfo,v 1.49 2025/11/19 00:14:21 gdt Exp $
 
-BLAKE2s (openvpn-2.6.15.tar.gz) = 523d7b23b325b6bf72b39bcbb90d103ae964aed57f2c27c88ed2dfe90813fd77
-SHA512 (openvpn-2.6.15.tar.gz) = 14fde7894ddd9cf4aef28d603fcc8e7a7bebc7f5ab38ce07b3f39faa135a225b5307fb8989ebef772a3dec11e17242e05dbf69d26d83e93a44585ad25a8b2a4f
-Size (openvpn-2.6.15.tar.gz) = 1917742 bytes
+BLAKE2s (openvpn-2.6.16.tar.gz) = 5d4a83e4351b2f2c6c8a2475b6cdce492ebc9cad864320e7aa08d7f2a9d2e59d
+SHA512 (openvpn-2.6.16.tar.gz) = 63df1416dc70c34e20c3bc56b0f56ed7eadb788378fa585ed2b19fd1f1b9ce39f6f64b44ac08cb0f5c39a054b2e33ae62b31f83f72211c8f2ffa4d562bc5545b
+Size (openvpn-2.6.16.tar.gz) = 1933428 bytes
 BLAKE2s (openvpn-acct-wtmpx-20130210.tgz) = 2bb02a4e6adb7ce1d189271a6fbb6cbffd6a37d7b5e75cccebfc8dfac6dbaddd
 SHA512 (openvpn-acct-wtmpx-20130210.tgz) = 7b8fd4929e65d8d84158f62e5a17ff3adb3b4a6cff63b29038acfb368750719f2f593786ed9b02402824c19d872b188d2a46740a5c5f853e8873a71481b13aaf
 Size (openvpn-acct-wtmpx-20130210.tgz) = 2778 bytes

Index: pkgsrc/net/openvpn-nagios/Makefile
diff -u pkgsrc/net/openvpn-nagios/Makefile:1.18 pkgsrc/net/openvpn-nagios/Makefile:1.19
--- pkgsrc/net/openvpn-nagios/Makefile:1.18     Wed Sep 24 17:08:47 2025
+++ pkgsrc/net/openvpn-nagios/Makefile  Wed Nov 19 00:14:21 2025
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile,v 1.18 2025/09/24 17:08:47 gdt Exp $
+# $NetBSD: Makefile,v 1.19 2025/11/19 00:14:21 gdt Exp $
 
 .include "../../net/openvpn/Makefile.common"
 
 DISTNAME=      openvpn-nagios-20130210
-PKGREVISION=   7
+PKGREVISION=   8
 DISTFILES=     ${DISTNAME}${EXTRACT_SUFX} ${OPENVPN_DISTFILE}
 CATEGORIES=    net
 MASTER_SITES=  http://ftp.espci.fr/pub/openvpn-nagios/

Index: pkgsrc/net/openvpn-nagios/distinfo
diff -u pkgsrc/net/openvpn-nagios/distinfo:1.45 pkgsrc/net/openvpn-nagios/distinfo:1.46
--- pkgsrc/net/openvpn-nagios/distinfo:1.45     Wed Sep 24 17:08:47 2025
+++ pkgsrc/net/openvpn-nagios/distinfo  Wed Nov 19 00:14:21 2025
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.45 2025/09/24 17:08:47 gdt Exp $
+$NetBSD: distinfo,v 1.46 2025/11/19 00:14:21 gdt Exp $
 
-BLAKE2s (openvpn-2.6.15.tar.gz) = 523d7b23b325b6bf72b39bcbb90d103ae964aed57f2c27c88ed2dfe90813fd77
-SHA512 (openvpn-2.6.15.tar.gz) = 14fde7894ddd9cf4aef28d603fcc8e7a7bebc7f5ab38ce07b3f39faa135a225b5307fb8989ebef772a3dec11e17242e05dbf69d26d83e93a44585ad25a8b2a4f
-Size (openvpn-2.6.15.tar.gz) = 1917742 bytes
+BLAKE2s (openvpn-2.6.16.tar.gz) = 5d4a83e4351b2f2c6c8a2475b6cdce492ebc9cad864320e7aa08d7f2a9d2e59d
+SHA512 (openvpn-2.6.16.tar.gz) = 63df1416dc70c34e20c3bc56b0f56ed7eadb788378fa585ed2b19fd1f1b9ce39f6f64b44ac08cb0f5c39a054b2e33ae62b31f83f72211c8f2ffa4d562bc5545b
+Size (openvpn-2.6.16.tar.gz) = 1933428 bytes
 BLAKE2s (openvpn-nagios-20130210.tgz) = 713b55e865350c44a314aa3b48694695f4d82b50883d1fae919f01e9545c7c34
 SHA512 (openvpn-nagios-20130210.tgz) = 80e565f32379c39eb6c7f3b4744af221ae882ff07dce9dae5bd7feb73b0edcfc7c7ac7f70d23fdcd4f492b66f095f09833deb122449840b36ea606ce91900358
 Size (openvpn-nagios-20130210.tgz) = 3034 bytes