openvpn: update to 2.6.14
authorIvan Pavlov <redacted>
Fri, 4 Apr 2025 05:51:00 +0000 (08:51 +0300)
committerJosef Schlehofer <redacted>
Fri, 4 Apr 2025 12:41:46 +0000 (14:41 +0200)
commit74a66189f123bd1bca3171612327c5863761af26
treede832471b5bbb11246ac003b63f66cfc100b6fb0
parente800fc7e8cadcd28b92429eb6ff9e677f4c50d46
openvpn: update to 2.6.14

Security fixes:

​CVE-2025-2704: fix possible ASSERT() on OpenVPN servers using --tls-crypt-v2
 Security scope: OpenVPN servers between 2.6.1 and 2.6.13 using --tls-crypt-v2 can be made
 to abort with an ASSERT() message by sending a particular combination of authenticated and
 malformed packets. No crypto integrity is violated, no data is leaked, and no remote code
 execution is possible. This bug does not affect OpenVPN clients.

For details refer to https://github.com/OpenVPN/openvpn/blob/v2.6.14/Changes.rst

Signed-off-by: Ivan Pavlov <redacted>
net/openvpn/Makefile
net/openvpn/patches/100-mbedtls-disable-runtime-version-check.patch
git clone https://git.99rst.org/PROJECT