diff options
| author | Matthias Andree <mandree@FreeBSD.org> | 2016-05-12 23:38:15 +0000 |
|---|---|---|
| committer | Matthias Andree <mandree@FreeBSD.org> | 2016-05-12 23:38:15 +0000 |
| commit | 603b358714a2183943f69604d6b628323f128690 (patch) | |
| tree | 20fe10cf0f938401f56095869f0fdb3c810fa020 /security | |
| parent | Upgrade CHERI LLVM and Qemu ports to new snapshots supporting the (diff) | |
Security upgrade to OpenVPN 2.3.11, breaking POLARSSL option.
Quoting upstream maintainers' release notes:
"This release fixes two vulnerabilities: a port-share bug with DoS
potential and a buffer overflow by user supplied data when using pam
authentication. In addition a number of small fixes and improvements are
included."
WARNING: this upgrade breaks the PolarSSL-based build due to an
oversight in the cipher suite selection hardening, crashing
PolarSSL-based builds with a 0-pointer deferences.
Marking port BROKEN if POLARSSL is set.
Changelog: https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn23
Notes
Notes:
svn path=/head/; revision=415093
Diffstat (limited to 'security')
| -rw-r--r-- | security/openvpn/Makefile | 11 | ||||
| -rw-r--r-- | security/openvpn/distinfo | 4 |
2 files changed, 10 insertions, 5 deletions
diff --git a/security/openvpn/Makefile b/security/openvpn/Makefile index afcd06b06b63..1c749e80b08c 100644 --- a/security/openvpn/Makefile +++ b/security/openvpn/Makefile @@ -2,8 +2,7 @@ # $FreeBSD$ PORTNAME= openvpn -DISTVERSION= 2.3.10 -PORTREVISION= 2 +DISTVERSION= 2.3.11 CATEGORIES= security net MASTER_SITES= http://swupdate.openvpn.net/community/releases/ \ http://build.openvpn.net/downloads/releases/ @@ -120,4 +119,10 @@ post-install-EXAMPLES-on: (cd ${WRKSRC}/sample && ${COPYTREE_SHARE} \* ${STAGEDIR}${EXAMPLESDIR}/) ${CHMOD} ${BINMODE} ${STAGEDIR}${EXAMPLESDIR}/sample-scripts/* -.include <bsd.port.mk> +.include <bsd.port.pre.mk> + +.if ${PORT_OPTIONS:MPOLARSSL} +BROKEN=OpenVPN 2.3.11 with PolarSSL crashes on start unless TLS ciphers specified explicitly +.endif + +.include <bsd.port.post.mk> diff --git a/security/openvpn/distinfo b/security/openvpn/distinfo index 5a1164583fad..9c89160bf730 100644 --- a/security/openvpn/distinfo +++ b/security/openvpn/distinfo @@ -1,2 +1,2 @@ -SHA256 (openvpn-2.3.10.tar.xz) = c54dbf91d47b9533fac3b94d2b5719bdbe0d081fe8245184f91ef8a871d22003 -SIZE (openvpn-2.3.10.tar.xz) = 818152 +SHA256 (openvpn-2.3.11.tar.xz) = 0f5f1ca1dc5743fa166d93dd4ec952f014b5f33bafd88f0ea34b455cae1434a7 +SIZE (openvpn-2.3.11.tar.xz) = 833496 |