vyos-build.git - VyOS image build scripts (mirror of https://github.com/vyos/vyos-build.git)

Age	Commit message (Collapse)	Author
2026-09-17	openvpn: T9330: bump to 2.7.7	Antonio Quartulli
	2.7.7 carries CVE-2026-84732: two fixes in the reliability layer, an unbounded reliable TLS timeout and acks being honoured for packets that cannot be outstanding. Debian skipped 2.7.6, so debian/2.7.7-1 is the next packaging tag after the debian/2.7.5-1 this was pinned to. The carried gerrit 1734 patch stays: 2.7.7 still has no net_iface_ovpn_mode(), so pre-created DCO interfaces are not yet handled upstream. It applies to the new tree with line offsets only, and no Debian patch touches the files it edits.
2026-09-10	openvpn: T8264: build 2.7.5 backport for the in-tree ovpn module	Antonio Quartulli
	The in-tree "ovpn" module requires OpenVPN 2.7 or later, while bookworm ships 2.6.14 which speaks only ovpn-dco-v2. DCO stays inert until userspace is upgraded. systemd-dev does not exist in bookworm, so it is stripped before mk-build-deps reads debian/control. The package is also added to the rebuild trigger, without which it would never reach the mirror.