similarity index 96%
rename from meta-networking/recipes-support/openvpn/openvpn_2.7.5.bb
rename to meta-networking/recipes-support/openvpn/openvpn_2.7.6.bb
@@ -7,7 +7,7 @@ DEPENDS = "lzo lz4 openssl libcap-ng ${@bb.utils.contains('DISTRO_FEATURES', 'pa
inherit autotools systemd update-rc.d pkgconfig ptest
-SRC_URI = "http://swupdate.openvpn.org/community/releases/${BP}.tar.gz \
+SRC_URI = "https://github.com/OpenVPN/openvpn/releases/download/v${PV}/${BP}.tar.gz \
file://0001-configure.ac-eliminate-build-path-from-openvpn-versi.patch \
file://openvpn \
file://run-ptest \
@@ -15,7 +15,7 @@ SRC_URI = "http://swupdate.openvpn.org/community/releases/${BP}.tar.gz \
UPSTREAM_CHECK_URI = "https://openvpn.net/community-downloads"
-SRC_URI[sha256sum] = "c6864b3c7d4e059c7d6ce22d1b5fa646c8b379a06af872eeb9792b6083a44ac4"
+SRC_URI[sha256sum] = "10e24a9385f23cc38cc5cf448f3ca0769f939bc4cbecc4f4647d7e006e52db74"
CVE_STATUS[CVE-2020-27569] = "not-applicable-config: Applies only Aviatrix OpenVPN client, not openvpn"
Fixes CVE-2026-63649 (openvpnserv on Windows insufficiently scrutinizes the command line passed in from the control socket, allowing admin config-directory restrictions to be bypassed) and CVE-2026-63650 (--x509-username-field could unintentionally permit a certificate that should not have been accepted when built against mbedTLS). The upstream swupdate.openvpn.org/net release mirror has not yet synced the 2.7.6 tarball (returns 404), so fetch the official signed GitHub release asset instead, which is available immediately after tagging. The existing 0001-configure.ac-eliminate-build-path-from-openvpn-versi.patch still applies cleanly (with line-offset only) against 2.7.6's configure.ac; the CONFIGURE_DEFINES logic it patches is unchanged. AI-Generated: Uses Claude Code Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> --- .../openvpn/{openvpn_2.7.5.bb => openvpn_2.7.6.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta-networking/recipes-support/openvpn/{openvpn_2.7.5.bb => openvpn_2.7.6.bb} (96%)