mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-10-15 18:27:12 +00:00
Khem Raj
4ee9312479
Upgrade openvpn from 2.7.0 to 2.7.5. Changes: * Drop 0001-tests-skip-test-execution-when-cross-compiling.patch This release already guards the auth-pam unit test TESTS assignment with "if !CROSS_COMPILING" in tests/unit_tests/plugins/auth-pam/Makefile.am * Drop CVE-2026-40215.patch - fixed upstream in 2.7.2. * Drop CVE-2026-13117.patch - fixed upstream in 2.7.5. Security fixes included in this upgrade: Fixed in 2.7.2: * CVE-2026-40215: race condition in TLS handshake that could leak packet data from a previous handshake * CVE-2026-35058: server ASSERT() on a malformed packet with a valid tls-crypt-v2 key Fixed in 2.7.5: * CVE-2026-13379: openvpnserv (Windows) DNS SearchList state pollution * CVE-2026-12996: use-after-free in ack_write_buf() * CVE-2026-13117: use-after-free in tls_wrap_reneg() * CVE-2026-13122: server crash on malformed auth-token * CVE-2026-12932: memory leak in tls-crypt-v2 client key handling * CVE-2026-11771: 1-byte buffer overrun on NTLMv2 proxy responses * CVE-2026-13698: memory leak on tls-crypt-v2 packets Release notes: https://github.com/openvpn/openvpn/releases Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> Signed-off-by: Omkar Patil <OmkarAbaji.Patil@windriver.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Collection of layers for the OE-core universe
Main layer maintainer: Anuj Mittal anuj.mittal@oss.qualcomm.com
This repository is a collection of layers to supplement OE-Core with additional packages, Each layer have designated maintainer Please see the respective READMEs in the layer subdirectories