Ubuntu
openvpn package

openvpn 2.2.1-8ubuntu1.5 source package in Ubuntu

Changelog

openvpn (2.2.1-8ubuntu1.5) precise-security; urgency=medium

  * SECURITY UPDATE: Pre-authentication remote crash/information disclosure
    for clients
    - debian/patches/CVE-2017-7520.patch: prevent two kinds of stack buffer
      OOB reads and a crash for invalid input data in src/openvpn/ntlm.c.
    - CVE-2017-7520
  * SECURITY UPDATE: DoS in establish_http_proxy_passthru()
    - debian/patches/establish_http_proxy_passthru_dos.patch: fix
      null-pointer dereference in src/openvpn/proxy.c.
    - NO CVE number

 -- <email address hidden> (Leonidas S. Barbosa)  Wed, 02 Aug 2017 11:23:00 -0300

Upload details

Uploaded by:
Leonidas S. Barbosa
Uploaded to:
Precise
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
net
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Precise updates main net
Precise security main net

Downloads

File Size SHA-256 Checksum
openvpn_2.2.1.orig.tar.gz 890.1 KiB a860858cc92d4573399bb2ff17ac62d9b4b8939e6af0b8cc69150ba39d6e94e0
openvpn_2.2.1-8ubuntu1.5.debian.tar.gz 144.3 KiB 08bf48e0eb47747ac9087b121ac6ccb0f7f3aa19b2378f87cb0e3779372e39cf
openvpn_2.2.1-8ubuntu1.5.dsc 1.8 KiB 93eba3f47286fa1454d69645a3b375f93ec72e99f2a89072cd4116fd363a96e2

View changes file

Binary packages built by this source

openvpn: virtual private network daemon

 OpenVPN is an application to securely tunnel IP networks over a
 single UDP or TCP port. It can be used to access remote sites, make
 secure point-to-point connections, enhance wireless security, etc.
 .
 OpenVPN uses all of the encryption, authentication, and certification
 features provided by the OpenSSL library (any cipher, key size, or
 HMAC digest).
 .
 OpenVPN may use static, pre-shared keys or TLS-based dynamic key exchange. It
 also supports VPNs with dynamic endpoints (DHCP or dial-up clients), tunnels
 over NAT or connection-oriented stateful firewalls (such as Linux's iptables).

openvpn-dbgsym: debug symbols for package openvpn

 OpenVPN is an application to securely tunnel IP networks over a
 single UDP or TCP port. It can be used to access remote sites, make
 secure point-to-point connections, enhance wireless security, etc.
 .
 OpenVPN uses all of the encryption, authentication, and certification
 features provided by the OpenSSL library (any cipher, key size, or
 HMAC digest).
 .
 OpenVPN may use static, pre-shared keys or TLS-based dynamic key exchange. It
 also supports VPNs with dynamic endpoints (DHCP or dial-up clients), tunnels
 over NAT or connection-oriented stateful firewalls (such as Linux's iptables).