diff options
| author | Antonio Quartulli <antonio@mandelbit.com> | 2026-09-16 21:47:52 +0200 |
|---|---|---|
| committer | Antonio Quartulli <antonio@mandelbit.com> | 2026-09-17 11:59:57 +0200 |
| commit | be9e0690d8a0bb292e08c05711875e09fb99963c (patch) | |
| tree | b0ed442e1f3b9d86117cdcbd78899f5406ce7a01 /scripts/package-build | |
| parent | 51a040d6efb2e81dc669e99aa04c1dd48335727a (diff) | |
| download | vyos-build-be9e0690d8a0bb292e08c05711875e09fb99963c.tar.gz vyos-build-be9e0690d8a0bb292e08c05711875e09fb99963c.zip | |
openvpn: T9330: bump to 2.7.7
2.7.7 carries CVE-2026-84732: two fixes in the reliability layer, an
unbounded reliable TLS timeout and acks being honoured for packets that
cannot be outstanding. Debian skipped 2.7.6, so debian/2.7.7-1 is the
next packaging tag after the debian/2.7.5-1 this was pinned to.
The carried gerrit 1734 patch stays: 2.7.7 still has no
net_iface_ovpn_mode(), so pre-created DCO interfaces are not yet handled
upstream. It applies to the new tree with line offsets only, and no
Debian patch touches the files it edits.
Diffstat (limited to 'scripts/package-build')
| -rw-r--r-- | scripts/package-build/openvpn/package.toml | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/scripts/package-build/openvpn/package.toml b/scripts/package-build/openvpn/package.toml index 814b688a..cb000c2a 100644 --- a/scripts/package-build/openvpn/package.toml +++ b/scripts/package-build/openvpn/package.toml @@ -1,6 +1,6 @@ [[packages]] name = "openvpn" -commit_id = "debian/2.7.5-1" +commit_id = "debian/2.7.7-1" scm_url = "https://salsa.debian.org/debian/openvpn.git" # bookworm has no systemd-dev package, systemd itself ships the pkg-config |