openvpn 2.3.11-1ubuntu2.1 source package in Ubuntu
Changelog
openvpn (2.3.11-1ubuntu2.1) yakkety-security; urgency=medium * SECURITY UPDATE: birthday attack when using 64-bit block cipher - debian/patches/CVE-2016-6329.patch: print warning if 64-bit cipher is selected in src/openvpn/crypto.c, src/openvpn/crypto_openssl.c, src/openvpn/crypto_polarssl.c, tests/t_lpback.sh. - CVE-2016-6329 * SECURITY UPDATE: DoS due to Exhaustion of Packet-ID counter - debian/patches/CVE-2017-7479-pre.patch: merge packet_id_alloc_outgoing() into packet_id_write() in src/openvpn/crypto.c, src/openvpn/packet_id.c, src/openvpn/packet_id.h. - debian/patches/CVE-2017-7479.patch: drop packets instead of assert out if packet id rolls over in src/openvpn/crypto.c, src/openvpn/packet_id.c, src/openvpn/packet_id.h. - CVE-2017-7479 * SECURITY UPDATE: Remotely-triggerable ASSERT() on malformed IPv6 packet - debian/patches/CVE-2017-7508.patch: remove assert in src/openvpn/mss.c. - CVE-2017-7508 * SECURITY UPDATE: Remote-triggerable memory leaks - debian/patches/CVE-2017-7512.patch: fix leaks in src/openvpn/ssl_verify_openssl.c. - CVE-2017-7512 * SECURITY UPDATE: Pre-authentication remote crash/information disclosure for clients - debian/patches/CVE-2017-7520.patch: prevent two kinds of stack buffer OOB reads and a crash for invalid input data in src/openvpn/ntlm.c. - CVE-2017-7520 * SECURITY UPDATE: Potential double-free in --x509-alt-username and memory leaks - debian/patches/CVE-2017-7521.patch: fix double-free in src/openvpn/ssl_verify_openssl.c. - CVE-2017-7521 * SECURITY UPDATE: DoS in establish_http_proxy_passthru() - debian/patches/establish_http_proxy_passthru_dos.patch: fix null-pointer dereference in src/openvpn/proxy.c. - No CVE number -- Marc Deslauriers <email address hidden> Thu, 22 Jun 2017 09:04:47 -0400
Upload details
- Uploaded by:
- Marc Deslauriers
- Uploaded to:
- Yakkety
- Original maintainer:
- Ubuntu Developers
- Architectures:
- any
- Section:
- net
- Urgency:
- Medium Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
openvpn_2.3.11.orig.tar.gz | 1.2 MiB | 9117a4434fd35e61cf94f9ee7ef84b7aecbc6fa556f779ff599560f219756163 |
openvpn_2.3.11-1ubuntu2.1.debian.tar.xz | 60.9 KiB | f48cb10ea14d5d7634d13e489b9b4da37de275f5ced3c9e968be873278b4cde7 |
openvpn_2.3.11-1ubuntu2.1.dsc | 2.1 KiB | d24ac139b855b5d11a6f0752bb191cf48f9993588e1e71a60dd965e7366d7aa5 |
Available diffs
Binary packages built by this source
- openvpn: No summary available for openvpn in ubuntu yakkety.
No description available for openvpn in ubuntu yakkety.
- openvpn-dbgsym: No summary available for openvpn-dbgsym in ubuntu yakkety.
No description available for openvpn-dbgsym in ubuntu yakkety.