From e82b555a3d7ec4b5530966b2e231218683783f5f Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Sun, 20 Mar 2022 12:59:56 +0100 Subject: [PATCH] package/openvpn: security bump version to 2.5.6 Switched _SITE to https and _SOURCE to .gz because upstream does not provide a .xz tarball anymore. Fixes CVE 2022-0547, changelog: https://github.com/OpenVPN/openvpn/blob/release/2.5/Changes.rst Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni (cherry picked from commit f9c448a016f07951a41e5c0938e3dbd8630a704b) Signed-off-by: Peter Korsgaard --- package/openvpn/openvpn.hash | 2 +- package/openvpn/openvpn.mk | 5 ++--- 2 files changed, 3 insertions(+), 4 deletions(-) diff --git a/package/openvpn/openvpn.hash b/package/openvpn/openvpn.hash index f8e0493b54..bd598a5186 100644 --- a/package/openvpn/openvpn.hash +++ b/package/openvpn/openvpn.hash @@ -1,3 +1,3 @@ # Locally calculated after checking signature -sha256 119bd69fa0210838f6cdaa273696dc738efa200f454dbe11eb6dfb75dfb6003b openvpn-2.5.5.tar.xz +sha256 333a7ef3d5b317968aca2c77bdc29aa7c6d6bb3316eb3f79743b59c53242ad3d openvpn-2.5.6.tar.gz sha256 1fcb78d7e478bb8a9408010bdc91b36e213b1facfad093df3f7ce7e28af19043 COPYRIGHT.GPL diff --git a/package/openvpn/openvpn.mk b/package/openvpn/openvpn.mk index d6bcad62ba..db2f53a5f3 100644 --- a/package/openvpn/openvpn.mk +++ b/package/openvpn/openvpn.mk @@ -4,9 +4,8 @@ # ################################################################################ -OPENVPN_VERSION = 2.5.5 -OPENVPN_SOURCE = openvpn-$(OPENVPN_VERSION).tar.xz -OPENVPN_SITE = http://swupdate.openvpn.net/community/releases +OPENVPN_VERSION = 2.5.6 +OPENVPN_SITE = https://swupdate.openvpn.net/community/releases OPENVPN_DEPENDENCIES = host-pkgconf OPENVPN_LICENSE = GPL-2.0 OPENVPN_LICENSE_FILES = COPYRIGHT.GPL