Enclosed diff updates openconnect to 8.10, which fixes a potential
buffer overflow with GnuTLS describing local certs (CVE-2020-12823).
Changes: https://www.infradead.org/openconnect/changelog.html

Run tested on amd64.

I think it makes sense to push this to 6.7 as well.

Comments/OK?


diff --git Makefile Makefile
index c9b56144549..9a938c2b264 100644
--- Makefile
+++ Makefile
@@ -2,7 +2,7 @@
 
 COMMENT=       client for Cisco AnyConnect SSL VPN
 
-DISTNAME=      openconnect-8.08
+DISTNAME=      openconnect-8.10
 
 SHARED_LIBS +=  openconnect               4.5 # 5.6
 
@@ -43,7 +43,8 @@ LIB_DEPENDS=  archivers/lz4 \
 # further work
 TEST_DEPENDS=  net/ocserv
 
-FAKE_FLAGS=    pkgdatadir=${PREFIX}/share/doc/openconnect
+FAKE_FLAGS=    
bashcompletiondir=${PREFIX}/share/examples/openconnect/bash_completion.d \
+               pkgdatadir=${PREFIX}/share/doc/openconnect
 
 CONFIGURE_STYLE=       gnu
 CONFIGURE_ENV=         CPPFLAGS="-I${LOCALBASE}/include" \
diff --git distinfo distinfo
index ac8f211db28..e6753496aa5 100644
--- distinfo
+++ distinfo
@@ -1,2 +1,2 @@
-SHA256 (openconnect-8.08.tar.gz) = t0sw66u9SAEFbkbANz5x89QcdbgF/Mfuj8WG/lWTeeg=
-SIZE (openconnect-8.08.tar.gz) = 2038269
+SHA256 (openconnect-8.10.tar.gz) = MOZMbspL5Hu/HWH1PcADxmISE3ONTqejXlzxrC3purE=
+SIZE (openconnect-8.10.tar.gz) = 2084534
diff --git pkg/PLIST pkg/PLIST
index 682b39d4649..a75701c0230 100644
--- pkg/PLIST
+++ pkg/PLIST
@@ -50,6 +50,11 @@ share/doc/openconnect/tncc.html
 share/doc/openconnect/token.html
 share/doc/openconnect/tpm.html
 share/doc/openconnect/vpnc-script.html
+share/examples/openconnect/
+share/examples/openconnect/bash_completion.d/
+@sample ${SYSCONFDIR}/bash_completion.d/
+share/examples/openconnect/bash_completion.d/openconnect
+@sample ${SYSCONFDIR}/bash_completion.d/openconnect
 share/locale/ar/LC_MESSAGES/openconnect.mo
 share/locale/bs/LC_MESSAGES/openconnect.mo
 share/locale/ca/LC_MESSAGES/openconnect.mo

Reply via email to