On Thu May 14, 2020 at 09:51:54PM +0200, Bjorn Ketelaars wrote:
> Enclosed diff updates openconnect to 8.10, which fixes a potential
> buffer overflow with GnuTLS describing local certs (CVE-2020-12823).
> Changes: https://www.infradead.org/openconnect/changelog.html
>
> Run tested on amd64.
>
> I think it makes sense to push this to 6.7 as well.
Yes why not
>
> Comments/OK?
OK rsadowski@
>
>
> diff --git Makefile Makefile
> index c9b56144549..9a938c2b264 100644
> --- Makefile
> +++ Makefile
> @@ -2,7 +2,7 @@
>
> COMMENT= client for Cisco AnyConnect SSL VPN
>
> -DISTNAME= openconnect-8.08
> +DISTNAME= openconnect-8.10
>
> SHARED_LIBS += openconnect 4.5 # 5.6
>
> @@ -43,7 +43,8 @@ LIB_DEPENDS= archivers/lz4 \
> # further work
> TEST_DEPENDS= net/ocserv
>
> -FAKE_FLAGS= pkgdatadir=${PREFIX}/share/doc/openconnect
> +FAKE_FLAGS=
> bashcompletiondir=${PREFIX}/share/examples/openconnect/bash_completion.d \
> + pkgdatadir=${PREFIX}/share/doc/openconnect
>
> CONFIGURE_STYLE= gnu
> CONFIGURE_ENV= CPPFLAGS="-I${LOCALBASE}/include" \
> diff --git distinfo distinfo
> index ac8f211db28..e6753496aa5 100644
> --- distinfo
> +++ distinfo
> @@ -1,2 +1,2 @@
> -SHA256 (openconnect-8.08.tar.gz) =
> t0sw66u9SAEFbkbANz5x89QcdbgF/Mfuj8WG/lWTeeg=
> -SIZE (openconnect-8.08.tar.gz) = 2038269
> +SHA256 (openconnect-8.10.tar.gz) =
> MOZMbspL5Hu/HWH1PcADxmISE3ONTqejXlzxrC3purE=
> +SIZE (openconnect-8.10.tar.gz) = 2084534
> diff --git pkg/PLIST pkg/PLIST
> index 682b39d4649..a75701c0230 100644
> --- pkg/PLIST
> +++ pkg/PLIST
> @@ -50,6 +50,11 @@ share/doc/openconnect/tncc.html
> share/doc/openconnect/token.html
> share/doc/openconnect/tpm.html
> share/doc/openconnect/vpnc-script.html
> +share/examples/openconnect/
> +share/examples/openconnect/bash_completion.d/
> +@sample ${SYSCONFDIR}/bash_completion.d/
> +share/examples/openconnect/bash_completion.d/openconnect
> +@sample ${SYSCONFDIR}/bash_completion.d/openconnect
> share/locale/ar/LC_MESSAGES/openconnect.mo
> share/locale/bs/LC_MESSAGES/openconnect.mo
> share/locale/ca/LC_MESSAGES/openconnect.mo
>
