Path to this page:
Subject: CVS commit: pkgsrc/net
From: Adam Ciarcinski
Date: 2024-07-18 15:00:07
Message id: 20240718130008.02E07FC74@cvs.NetBSD.org
Log Message:
openvpn: updated to 2.6.12
v2.6.12
Bug fixes:
the fix for CVE-2024-5594 (refuse control channel messages with
nonprintable characters) was too strict, breaking user configurations
with AUTH_FAIL messages having trailing CR/NL characters. This often
happens if the AUTH_FAIL reason is set by a script. Strip those before
testing the command buffer. Also, add unit test.
Http-proxy: fix bug preventing proxy credentials caching.
Files: