MFH: r412540 r412541 r415093 r415116
Work around 10.3-RELEASE's service(8) shortcomings (r412540)
and to fix /usr/sbin/service -R (r412541).
PR: 208534
Reported by: allan@saddi.com
r415093 (2.3.11 upgrade) and r415116 (the polarssl fix-up) together:
Security upgrade to OpenVPN 2.3.11.
Quoting upstream maintainers' release notes:
"This release fixes two vulnerabilities: a port-share bug with DoS
potential and a buffer overflow by user supplied data when using pam
authentication. In addition a number of small fixes and improvements are
included."
Changelog: https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn23
he upstream backported a change from the master branch that fixes the
PolarSSL-based builds to go with the PolarSSL 1.3.X built-in defaults.
Approved by: ports-secteam (junovich)
PR: 209498
Security: 0dc8be9e-19af-11e6-8de0-080027ef73ec