Source Mage code commit list

[Ismael Luceno <scm AT sourcemage.org>]

GIT changes to master grimoire by Ismael Luceno <ismael AT sourcemage.org>:

 net/openvpn/DEPENDS     |    5 ++++-
 net/openvpn/DETAILS     |    3 ++-
 net/openvpn/HISTORY     |    5 +++++
 net/openvpn/openvpn.gpg |binary
 4 files changed, 11 insertions(+), 2 deletions(-)

New commits:
commit 0b461fa8249ab051d1291d81e6d87d3ca61e7c90
Author: Ismael Luceno <ismael AT sourcemage.org>
Commit: Ismael Luceno <ismael AT sourcemage.org>

    openvpn 2.4.9 + update upstream gpg key

commit 25a05a3cee5f45b2aef882d8e9806b0d11b1514a
Author: Ismael Luceno <ismael AT sourcemage.org>
Commit: Ismael Luceno <ismael AT sourcemage.org>

    openvpn: Warn about VORACLE attack
    
    Similarly to HTTPS (CRIME and BREACH attacks), VPN traffic can be
    compromised by compression.

diff --git a/net/openvpn/DEPENDS b/net/openvpn/DEPENDS
index 719f8ad..6502239 100755
--- a/net/openvpn/DEPENDS
+++ b/net/openvpn/DEPENDS
@@ -13,10 +13,13 @@ optional_depends SSL \
                  "--disable-crypto" \
                  "for crypto and key exchange support (highly recommended)" 
&&
 
+message "${PROBLEM_COLOR}WARNING: Using compression makes your VPN insecure.
+See: https://community.openvpn.net/openvpn/wiki/VORACLE${DEFAULT_COLOR}"; &&
+
 optional_depends lzo \
                  "--enable-lzo" \
                  "--disable-lzo" \
-                 "for LZO compression (highly recommended)" &&
+                 "for LZO compression" &&
 
 optional_depends lz4 \
                  "--enable-lz4" \
diff --git a/net/openvpn/DETAILS b/net/openvpn/DETAILS
index c9f9517..f016f6e 100755
--- a/net/openvpn/DETAILS
+++ b/net/openvpn/DETAILS
@@ -1,5 +1,5 @@
            SPELL=openvpn
-         VERSION=2.4.8
+         VERSION=2.4.9
   SECURITY_PATCH=6
           SOURCE=$SPELL-$VERSION.tar.xz
          SOURCE2=$SOURCE.asc
@@ -9,6 +9,7 @@ SOURCE_DIRECTORY=$BUILD_DIRECTORY/$SPELL-$VERSION
   SOURCE2_URL[0]="${SOURCE_URL[0]}.asc"
   SOURCE2_URL[1]="${SOURCE_URL[1]}.asc"
       SOURCE_GPG=openvpn.gpg:$SOURCE2:VERIFIED_UPSTREAM_KEY
+     
SOURCE_HASH=sha512:88dec6bc5993de92e33ed1a829b710c7b4c491253396d5c705c89c0949a859bd24151fdcb278df4b43ca6c39aa033c21ce6f812565a1d75c2dfb8fa198876b13
   SOURCE2_IGNORE=signature
         WEB_SITE=https://openvpn.net
          ENTERED=20040506
diff --git a/net/openvpn/HISTORY b/net/openvpn/HISTORY
index cab663f..5d36e2f 100644
--- a/net/openvpn/HISTORY
+++ b/net/openvpn/HISTORY
@@ -1,3 +1,8 @@
+2020-08-11 Ismael Luceno <ismael AT sourcemage.org>
+       * DEPENDS: Added warning about VORACLE attack
+       * DETAILS: updated spell to 2.4.9
+       * openvpn.gpg: Updated upstream key
+
 2019-10-30 Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
        * DETAILS: version 2.4.8
 
diff --git a/net/openvpn/openvpn.gpg b/net/openvpn/openvpn.gpg
index b4234a0..344cb29 100644
Binary files a/net/openvpn/openvpn.gpg and b/net/openvpn/openvpn.gpg differ