Skip to Content.
Sympa Menu

sm-commit - [SM-Commit] GIT changes to master grimoire by Ismael Luceno (0b461fa8249ab051d1291d81e6d87d3ca61e7c90)

sm-commit AT lists.ibiblio.org

Subject: Source Mage code commit list

List archive

Chronological Thread  
  • From: Ismael Luceno <scm AT sourcemage.org>
  • To: sm-commit AT lists.ibiblio.org
  • Subject: [SM-Commit] GIT changes to master grimoire by Ismael Luceno (0b461fa8249ab051d1291d81e6d87d3ca61e7c90)
  • Date: Tue, 11 Aug 2020 22:05:05 +0000

GIT changes to master grimoire by Ismael Luceno <ismael AT sourcemage.org>:

net/openvpn/DEPENDS | 5 ++++-
net/openvpn/DETAILS | 3 ++-
net/openvpn/HISTORY | 5 +++++
net/openvpn/openvpn.gpg |binary
4 files changed, 11 insertions(+), 2 deletions(-)

New commits:
commit 0b461fa8249ab051d1291d81e6d87d3ca61e7c90
Author: Ismael Luceno <ismael AT sourcemage.org>
Commit: Ismael Luceno <ismael AT sourcemage.org>

openvpn 2.4.9 + update upstream gpg key

commit 25a05a3cee5f45b2aef882d8e9806b0d11b1514a
Author: Ismael Luceno <ismael AT sourcemage.org>
Commit: Ismael Luceno <ismael AT sourcemage.org>

openvpn: Warn about VORACLE attack

Similarly to HTTPS (CRIME and BREACH attacks), VPN traffic can be
compromised by compression.

diff --git a/net/openvpn/DEPENDS b/net/openvpn/DEPENDS
index 719f8ad..6502239 100755
--- a/net/openvpn/DEPENDS
+++ b/net/openvpn/DEPENDS
@@ -13,10 +13,13 @@ optional_depends SSL \
"--disable-crypto" \
"for crypto and key exchange support (highly recommended)"
&&

+message "${PROBLEM_COLOR}WARNING: Using compression makes your VPN insecure.
+See: https://community.openvpn.net/openvpn/wiki/VORACLE${DEFAULT_COLOR}"; &&
+
optional_depends lzo \
"--enable-lzo" \
"--disable-lzo" \
- "for LZO compression (highly recommended)" &&
+ "for LZO compression" &&

optional_depends lz4 \
"--enable-lz4" \
diff --git a/net/openvpn/DETAILS b/net/openvpn/DETAILS
index c9f9517..f016f6e 100755
--- a/net/openvpn/DETAILS
+++ b/net/openvpn/DETAILS
@@ -1,5 +1,5 @@
SPELL=openvpn
- VERSION=2.4.8
+ VERSION=2.4.9
SECURITY_PATCH=6
SOURCE=$SPELL-$VERSION.tar.xz
SOURCE2=$SOURCE.asc
@@ -9,6 +9,7 @@ SOURCE_DIRECTORY=$BUILD_DIRECTORY/$SPELL-$VERSION
SOURCE2_URL[0]="${SOURCE_URL[0]}.asc"
SOURCE2_URL[1]="${SOURCE_URL[1]}.asc"
SOURCE_GPG=openvpn.gpg:$SOURCE2:VERIFIED_UPSTREAM_KEY
+
SOURCE_HASH=sha512:88dec6bc5993de92e33ed1a829b710c7b4c491253396d5c705c89c0949a859bd24151fdcb278df4b43ca6c39aa033c21ce6f812565a1d75c2dfb8fa198876b13
SOURCE2_IGNORE=signature
WEB_SITE=https://openvpn.net
ENTERED=20040506
diff --git a/net/openvpn/HISTORY b/net/openvpn/HISTORY
index cab663f..5d36e2f 100644
--- a/net/openvpn/HISTORY
+++ b/net/openvpn/HISTORY
@@ -1,3 +1,8 @@
+2020-08-11 Ismael Luceno <ismael AT sourcemage.org>
+ * DEPENDS: Added warning about VORACLE attack
+ * DETAILS: updated spell to 2.4.9
+ * openvpn.gpg: Updated upstream key
+
2019-10-30 Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
* DETAILS: version 2.4.8

diff --git a/net/openvpn/openvpn.gpg b/net/openvpn/openvpn.gpg
index b4234a0..344cb29 100644
Binary files a/net/openvpn/openvpn.gpg and b/net/openvpn/openvpn.gpg differ



  • [SM-Commit] GIT changes to master grimoire by Ismael Luceno (0b461fa8249ab051d1291d81e6d87d3ca61e7c90), Ismael Luceno, 08/11/2020

Archive powered by MHonArc 2.6.24.

Top of Page