mbox series

[meta-networking,wrynose,0/2] openvpn: isolate GPLv3 dns-updown script and upgrade to 2.7.5

Message ID 20260902121208.3587748-1-OmkarAbaji.Patil@windriver.com
Headers show
Series openvpn: isolate GPLv3 dns-updown script and upgrade to 2.7.5 | expand

Message

Omkar Patil Sept. 2, 2026, 12:12 p.m. UTC
This series backports two openvpn changes to the wrynose branch:

1/2: Move the optional GPLv3 dns-updown bash script into a separate
     package to isolate its license from the main package.
     (backport of upstream commit 995f143c)

2/2: Upgrade openvpn 2.7.0 -> 2.7.5 and drop three patches now
     included upstream. The upgrade brings multiple CVE fixes (CVE-2026-40215,
     CVE-2026-35058, CVE-2026-13379, CVE-2026-12996, CVE-2026-13117,
     CVE-2026-13122, CVE-2026-12932, CVE-2026-11771, CVE-2026-13698).
     See the commit message for details.

Both changes are independent and can be applied separately.

Khem Raj (1):
  openvpn: upgrade 2.7.0 -> 2.7.5

Louis Rannou (1):
  openvpn: create an extra package for the dns-updown script

 ...-test-execution-when-cross-compiling.patch | 34 -----------
 .../openvpn/openvpn/CVE-2026-13117.patch      | 46 ---------------
 .../openvpn/openvpn/CVE-2026-40215.patch      | 59 -------------------
 .../{openvpn_2.7.0.bb => openvpn_2.7.5.bb}    | 10 ++--
 4 files changed, 4 insertions(+), 145 deletions(-)
 delete mode 100644 meta-networking/recipes-support/openvpn/openvpn/0001-tests-skip-test-execution-when-cross-compiling.patch
 delete mode 100644 meta-networking/recipes-support/openvpn/openvpn/CVE-2026-13117.patch
 delete mode 100644 meta-networking/recipes-support/openvpn/openvpn/CVE-2026-40215.patch
 rename meta-networking/recipes-support/openvpn/{openvpn_2.7.0.bb => openvpn_2.7.5.bb} (94%)