Ubuntu
openvpn package

openvpn 2.6.1-1ubuntu1.1 source package in Ubuntu

Changelog

openvpn (2.6.1-1ubuntu1.1) lunar-security; urgency=medium

  * SECURITY UPDATE: divide-by-zero via --fragment option
    - debian/patches/CVE-2023-46849.patch: remove saving initial frame code
      in src/openvpn/forward.c, src/openvpn/init.c, src/openvpn/openvpn.h.
    - CVE-2023-46849
  * SECURITY UPDATE: memory disclosure or code exec via use-after-free
    - debian/patches/CVE-2023-46850.patch: fix using to_link buffer after
      freed in src/openvpn/ssl.c.
    - CVE-2023-46850

 -- Marc Deslauriers <email address hidden>  Wed, 15 Nov 2023 13:15:33 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Lunar
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
net
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Lunar updates main net
Lunar security main net

Downloads

File Size SHA-256 Checksum
openvpn_2.6.1.orig.tar.gz 1.8 MiB 8cbc4fd8ce27b85107b449833c3b30fb05f1ca3c81b46a0ba8658036944266bc
openvpn_2.6.1-1ubuntu1.1.debian.tar.xz 67.2 KiB c63235a535eb85535b69fde30b40f5372eb337370a53880c84326dfc63514a7a
openvpn_2.6.1-1ubuntu1.1.dsc 2.2 KiB ab9757695f3512f670501e916d2f3cc52e394edaa17285d3ea450714ef82a85a

View changes file

Binary packages built by this source

openvpn: virtual private network daemon

 OpenVPN is an application to securely tunnel IP networks over a
 single UDP or TCP port. It can be used to access remote sites, make
 secure point-to-point connections, enhance wireless security, etc.
 .
 OpenVPN uses all of the encryption, authentication, and certification
 features provided by the OpenSSL library (any cipher, key size, or
 HMAC digest).
 .
 OpenVPN may use static, pre-shared keys or TLS-based dynamic key exchange. It
 also supports VPNs with dynamic endpoints (DHCP or dial-up clients), tunnels
 over NAT or connection-oriented stateful firewalls (such as Linux's iptables).

openvpn-dbgsym: debug symbols for openvpn