OpenPOWER buildroot sources https://git.raptorcs.com/git/buildroot/atom?h=2017.11 2017-09-27T20:03:43+00:00 2017-09-27T20:03:43+00:00 Bernd Kuhls bernd.kuhls@t-online.de 2017-09-27T17:05:00+00:00 urn:sha1:aa070c802ef2556a732ff33e55f17fc0d3444436 Fixes CVE-2017-12166: https://community.openvpn.net/openvpn/wiki/CVE-2017-12166 Changelog: https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24 Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2017-06-22T21:26:57+00:00 Baruch Siach baruch@tkos.co.il 2017-06-22T17:54:57+00:00 urn:sha1:24f2eb1e157e2c0b08579939c293aa7c1d3d0c28 Fixes: CVE-2017-7508 - Remotely-triggerable ASSERT() on malformed IPv6 packet CVE-2017-7520 - Pre-authentication remote crash/information disclosure for clients CVE-2017-7521 - Potential double-free in --x509-alt-username CVE-2017-7521 - Remote-triggerable memory leaks CVE-2017-7522 - Post-authentication remote DoS when using the --x509-track option Details at https://community.openvpn.net/openvpn/wiki/VulnerabilitiesFixedInOpenVPN243 Cc: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2017-05-11T19:12:20+00:00 Bernd Kuhls bernd.kuhls@t-online.de 2017-05-11T16:53:33+00:00 urn:sha1:a4e5ee245e9d19a8e1c95b26bd17f2b6d95e9263 Fixes CVE-2017-7478 & CVE-2017-7479: https://community.openvpn.net/openvpn/wiki/QuarkslabAndCryptographyEngineerAudits Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2017-04-01T13:16:38+00:00 Rahul Bedarkar rahulbedarkar89@gmail.com 2017-03-30T13:43:32+00:00 urn:sha1:af31c309e73ca88ee70c52e591f90e4b89ff5e55 We want to use SPDX identifier for license strings as much as possible. SPDX short identifier for GPLv2/GPLv2+ is GPL-2.0/GPL-2.0+. This change is done by using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/\<GPLv2\>/GPL-2.0/g' Signed-off-by: Rahul Bedarkar <rahulbedarkar89@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2017-03-25T13:57:17+00:00 Jeroen Roovers jer@airfi.aero 2017-03-24T07:12:03+00:00 urn:sha1:65e6f6ff2adc21f2fea4c0c8bc4dcd9e3b865264 2.4.0 added lz4 support. Make that choice explicit or the bundled compat-lz4 "stub" will be used. Signed-off-by: Jeroen Roovers <jer@airfi.aero> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2017-03-25T13:56:43+00:00 Vicente Olivert Riera Vincent.Riera@imgtec.com 2017-03-23T17:37:50+00:00 urn:sha1:9ecbe727aa2e5a47bf23687c82afad806d882bb2 --disable-eurephia configure option doesn't exist, so remove it. Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2017-01-24T10:24:46+00:00 Vicente Olivert Riera Vincent.Riera@imgtec.com 2017-01-09T16:13:42+00:00 urn:sha1:878dc8cc9b9d774bc7821156af3cd838c435453b --enable-password-save option has been removed (https://github.com/OpenVPN/openvpn/commit/9ffd00e7541d83571b9eec087c6b3545ff68441f). Since it now defaults to "enabled" in the upstream package, there is no point in adding Config.in.legacy support for it: Config.in.legacy logic only kicks in when the option is enabled, but the upstream package precisely preserve the compatibility with this situation. Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2016-12-08T21:22:11+00:00 Bernd Kuhls bernd.kuhls@t-online.de 2016-12-08T18:40:42+00:00 urn:sha1:c021b1329155fd1ff085dcb2c7e8a36850a391e5 Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2016-11-04T09:15:06+00:00 Bernd Kuhls bernd.kuhls@t-online.de 2016-11-04T05:52:55+00:00 urn:sha1:fdc9f9d035ef2b90d9a0f5617d2016b01e10a84f Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2016-08-23T21:14:36+00:00 Gustavo Zacarias gustavo@zacarias.com.ar 2016-08-23T20:53:23+00:00 urn:sha1:40b6d22eabe21c9682102870a0a01c868ac1e3da Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>