From 71a57c9574ad8847983b7322f1aec405e77d9cb8 Mon Sep 17 00:00:00 2001 From: Antonio Quartulli Date: Mon, 26 Oct 2026 21:39:17 +0100 Subject: openvpn: T9517: bump to 2.7.8 2.7.8 fixes CVE-2026-84790 and CVE-2026-88964 plus Linux DCO races around iroute cleanup and netlink notifications. Refresh the carried DCO patch (gerrit 1734): a context line in dco_linux.h changed, the patch itself is unchanged. --- scripts/package-build/openvpn/package.toml | 2 +- .../patches/openvpn/1734-support-pre-existing-dco-interfaces.patch | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) (limited to 'scripts') diff --git a/scripts/package-build/openvpn/package.toml b/scripts/package-build/openvpn/package.toml index cb000c2a..2e49d8bc 100644 --- a/scripts/package-build/openvpn/package.toml +++ b/scripts/package-build/openvpn/package.toml @@ -1,6 +1,6 @@ [[packages]] name = "openvpn" -commit_id = "debian/2.7.7-1" +commit_id = "debian/2.7.8-1" scm_url = "https://salsa.debian.org/debian/openvpn.git" # bookworm has no systemd-dev package, systemd itself ships the pkg-config diff --git a/scripts/package-build/openvpn/patches/openvpn/1734-support-pre-existing-dco-interfaces.patch b/scripts/package-build/openvpn/patches/openvpn/1734-support-pre-existing-dco-interfaces.patch index c4878b13..aa0ca59d 100644 --- a/scripts/package-build/openvpn/patches/openvpn/1734-support-pre-existing-dco-interfaces.patch +++ b/scripts/package-build/openvpn/patches/openvpn/1734-support-pre-existing-dco-interfaces.patch @@ -152,7 +152,7 @@ index e3e4824..42df09e 100644 - typedef struct { - struct nl_sock *nl_sock; + /* socket used for synchronous request/reply transactions (commands and diff --git a/src/openvpn/networking.h b/src/openvpn/networking.h index bce0c19..cab560c 100644 --- a/src/openvpn/networking.h -- cgit v1.2.3