mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-08-31 03:45:41 +00:00
Khem Raj
464464e64f
Fixes CVE-2026-63649 (openvpnserv on Windows insufficiently scrutinizes the command line passed in from the control socket, allowing admin config-directory restrictions to be bypassed) and CVE-2026-63650 (--x509-username-field could unintentionally permit a certificate that should not have been accepted when built against mbedTLS). The upstream swupdate.openvpn.org/net release mirror has not yet synced the 2.7.6 tarball (returns 404), so fetch the official signed GitHub release asset instead, which is available immediately after tagging. The existing 0001-configure.ac-eliminate-build-path-from-openvpn-versi.patch still applies cleanly (with line-offset only) against 2.7.6's configure.ac; the CONFIGURE_DEFINES logic it patches is unchanged. AI-Generated: Uses Claude Code Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Collection of layers for the OE-core universe
Main layer maintainer: Khem Raj raj.khem@gmail.com
This repository is a collection of layers to supplement OE-Core with additional packages, Each layer have designated maintainer Please see the respective READMEs in the layer subdirectories