[meta-networking][PATCH 091/109] openvpn: upgrade 2.7.5 -> 2.7.6

Fixes CVE-2026-63649 (openvpnserv on Windows insufficiently
scrutinizes the command line passed in from the control socket,
allowing admin config-directory restrictions to be bypassed) and
CVE-2026-63650 (--x509-username-field could unintentionally permit
a certificate that should not have been accepted when built against
mbedTLS).

The upstream swupdate.openvpn.org/net release mirror has not yet
synced the 2.7.6 tarball (returns 404), so fetch the official signed
GitHub release asset instead, which is available immediately after
tagging.

The existing 0001-configure.ac-eliminate-build-path-from-openvpn-versi.patch
still applies cleanly (with line-offset only) against 2.7.6's
configure.ac; the CONFIGURE_DEFINES logic it patches is unchanged.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <[email protected]>
---
 .../openvpn/{openvpn_2.7.5.bb => openvpn_2.7.6.bb}            | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
 rename meta-networking/recipes-support/openvpn/{openvpn_2.7.5.bb => openvpn_2.7.6.bb} (96%)

diff --git a/meta-networking/recipes-support/openvpn/openvpn_2.7.5.bb b/meta-networking/recipes-support/openvpn/openvpn_2.7.6.bb
similarity index 96%
rename from meta-networking/recipes-support/openvpn/openvpn_2.7.5.bb
rename to meta-networking/recipes-support/openvpn/openvpn_2.7.6.bb
index 0aea6b7e74..d6c8a0e34d 100644
--- a/meta-networking/recipes-support/openvpn/openvpn_2.7.5.bb
+++ b/meta-networking/recipes-support/openvpn/openvpn_2.7.6.bb
@@ -7,7 +7,7 @@ DEPENDS = "lzo lz4 openssl libcap-ng ${@bb.utils.contains('DISTRO_FEATURES', 'pa
 
 inherit autotools systemd update-rc.d pkgconfig ptest
 
-SRC_URI = "http://swupdate.openvpn.org/community/releases/${BP}.tar.gz \
+SRC_URI = "https://github.com/OpenVPN/openvpn/releases/download/v${PV}/${BP}.tar.gz \
            file://0001-configure.ac-eliminate-build-path-from-openvpn-versi.patch \
            file://openvpn \
            file://run-ptest \
@@ -15,7 +15,7 @@ SRC_URI = "http://swupdate.openvpn.org/community/releases/${BP}.tar.gz \
 
 UPSTREAM_CHECK_URI = "https://openvpn.net/community-downloads"
 
-SRC_URI[sha256sum] = "c6864b3c7d4e059c7d6ce22d1b5fa646c8b379a06af872eeb9792b6083a44ac4"
+SRC_URI[sha256sum] = "10e24a9385f23cc38cc5cf448f3ca0769f939bc4cbecc4f4647d7e006e52db74"
 
 CVE_STATUS[CVE-2020-27569] = "not-applicable-config: Applies only Aviatrix OpenVPN client, not openvpn"