From be9e0690d8a0bb292e08c05711875e09fb99963c Mon Sep 17 00:00:00 2001 From: Antonio Quartulli Date: Wed, 16 Sep 2026 21:47:52 +0200 Subject: openvpn: T9330: bump to 2.7.7 2.7.7 carries CVE-2026-84732: two fixes in the reliability layer, an unbounded reliable TLS timeout and acks being honoured for packets that cannot be outstanding. Debian skipped 2.7.6, so debian/2.7.7-1 is the next packaging tag after the debian/2.7.5-1 this was pinned to. The carried gerrit 1734 patch stays: 2.7.7 still has no net_iface_ovpn_mode(), so pre-created DCO interfaces are not yet handled upstream. It applies to the new tree with line offsets only, and no Debian patch touches the files it edits. --- scripts/package-build/openvpn/package.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'scripts') diff --git a/scripts/package-build/openvpn/package.toml b/scripts/package-build/openvpn/package.toml index 814b688a..cb000c2a 100644 --- a/scripts/package-build/openvpn/package.toml +++ b/scripts/package-build/openvpn/package.toml @@ -1,6 +1,6 @@ [[packages]] name = "openvpn" -commit_id = "debian/2.7.5-1" +commit_id = "debian/2.7.7-1" scm_url = "https://salsa.debian.org/debian/openvpn.git" # bookworm has no systemd-dev package, systemd itself ships the pkg-config -- cgit v1.2.3