openvpn: update to v2.4.2
authorJo-Philipp Wich <jo@mein.io>
Fri, 12 May 2017 09:48:58 +0000 (11:48 +0200)
committerJo-Philipp Wich <jo@mein.io>
Fri, 12 May 2017 09:54:48 +0000 (11:54 +0200)
commite66f17ac1e9579cf08448c439a770dcd1d00d080
treed818cbd0cf7424b9d5a76ea5ee2f7aeff8e2cfc2
parent6704410b158b47aecf507971ad2ee5e3db840e3a
openvpn: update to v2.4.2

Update to version 2.4.2 in order to address two potential Denial-of-Service
vectors in OpenVPN.

CVE-2017-7478 - Don't assert out on receiving too-large control packets
CVE-2017-7479 - Drop packets instead of assert out if packet id rolls over

Ref: https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24#OpenVPN2.4.2
Ref: https://community.openvpn.net/openvpn/wiki/QuarkslabAndCryptographyEngineerAudits

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
package/network/services/openvpn/Makefile