Enclosed diff updates openconnect to 8.10, which fixes a potential buffer overflow with GnuTLS describing local certs (CVE-2020-12823). Changes: https://www.infradead.org/openconnect/changelog.html
Run tested on amd64. I think it makes sense to push this to 6.7 as well. Comments/OK? diff --git Makefile Makefile index c9b56144549..9a938c2b264 100644 --- Makefile +++ Makefile @@ -2,7 +2,7 @@ COMMENT= client for Cisco AnyConnect SSL VPN -DISTNAME= openconnect-8.08 +DISTNAME= openconnect-8.10 SHARED_LIBS += openconnect 4.5 # 5.6 @@ -43,7 +43,8 @@ LIB_DEPENDS= archivers/lz4 \ # further work TEST_DEPENDS= net/ocserv -FAKE_FLAGS= pkgdatadir=${PREFIX}/share/doc/openconnect +FAKE_FLAGS= bashcompletiondir=${PREFIX}/share/examples/openconnect/bash_completion.d \ + pkgdatadir=${PREFIX}/share/doc/openconnect CONFIGURE_STYLE= gnu CONFIGURE_ENV= CPPFLAGS="-I${LOCALBASE}/include" \ diff --git distinfo distinfo index ac8f211db28..e6753496aa5 100644 --- distinfo +++ distinfo @@ -1,2 +1,2 @@ -SHA256 (openconnect-8.08.tar.gz) = t0sw66u9SAEFbkbANz5x89QcdbgF/Mfuj8WG/lWTeeg= -SIZE (openconnect-8.08.tar.gz) = 2038269 +SHA256 (openconnect-8.10.tar.gz) = MOZMbspL5Hu/HWH1PcADxmISE3ONTqejXlzxrC3purE= +SIZE (openconnect-8.10.tar.gz) = 2084534 diff --git pkg/PLIST pkg/PLIST index 682b39d4649..a75701c0230 100644 --- pkg/PLIST +++ pkg/PLIST @@ -50,6 +50,11 @@ share/doc/openconnect/tncc.html share/doc/openconnect/token.html share/doc/openconnect/tpm.html share/doc/openconnect/vpnc-script.html +share/examples/openconnect/ +share/examples/openconnect/bash_completion.d/ +@sample ${SYSCONFDIR}/bash_completion.d/ +share/examples/openconnect/bash_completion.d/openconnect +@sample ${SYSCONFDIR}/bash_completion.d/openconnect share/locale/ar/LC_MESSAGES/openconnect.mo share/locale/bs/LC_MESSAGES/openconnect.mo share/locale/ca/LC_MESSAGES/openconnect.mo