Publishing details

• Created on 2017-06-22 by Ubuntu Archive Auto-Sync
• Removed from disk on 2017-07-04.
• Removal requested on 2017-07-04.
• Superseded on 2017-07-03 by openvpn - 2.4.3-4ubuntu1
• Published on 2017-06-22

Changelog

openvpn (2.4.0-5ubuntu2) artful; urgency=medium

  * SECURITY UPDATE: Remotely-triggerable ASSERT() on malformed IPv6 packet
    - debian/patches/CVE-2017-7508.patch: remove assert in
      src/openvpn/mss.c.
    - CVE-2017-7508
  * SECURITY UPDATE: Remote-triggerable memory leaks
    - debian/patches/CVE-2017-7512.patch: fix leaks in
      src/openvpn/ssl_verify_openssl.c.
    - CVE-2017-7512
  * SECURITY UPDATE: Pre-authentication remote crash/information disclosure
    for clients
    - debian/patches/CVE-2017-7520.patch: prevent two kinds of stack buffer
      OOB reads and a crash for invalid input data in src/openvpn/ntlm.c.
    - CVE-2017-7520
  * SECURITY UPDATE: Potential double-free in --x509-alt-username and
    memory leaks
    - debian/patches/CVE-2017-7521.patch: fix double-free in
      src/openvpn/ssl_verify_openssl.c.
    - CVE-2017-7521
  * SECURITY UPDATE: DoS in establish_http_proxy_passthru()
    - debian/patches/establish_http_proxy_passthru_dos.patch: fix
      null-pointer dereference in src/openvpn/proxy.c.
    - No CVE number

 -- Marc Deslauriers <email address hidden>  Thu, 22 Jun 2017 14:10:56 -0400

Builds

• amd64
• arm64
• armhf
• i386
• ppc64el
• s390x

Package files

• openvpn-dbgsym_2.4.0-5ubuntu2_amd64.ddeb (1.3 MiB)
• openvpn-dbgsym_2.4.0-5ubuntu2_arm64.ddeb (1.3 MiB)
• openvpn-dbgsym_2.4.0-5ubuntu2_armhf.ddeb (1.3 MiB)
• openvpn-dbgsym_2.4.0-5ubuntu2_i386.ddeb (1.2 MiB)
• openvpn-dbgsym_2.4.0-5ubuntu2_ppc64el.ddeb (1.4 MiB)
• openvpn-dbgsym_2.4.0-5ubuntu2_s390x.ddeb (1.3 MiB)
• openvpn_2.4.0-5ubuntu2.debian.tar.xz (59.4 KiB)
• openvpn_2.4.0-5ubuntu2.dsc (2.1 KiB)
• openvpn_2.4.0-5ubuntu2_amd64.deb (477.3 KiB)
• openvpn_2.4.0-5ubuntu2_arm64.deb (427.2 KiB)
• openvpn_2.4.0-5ubuntu2_armhf.deb (439.2 KiB)
• openvpn_2.4.0-5ubuntu2_i386.deb (507.8 KiB)
• openvpn_2.4.0-5ubuntu2_ppc64el.deb (469.7 KiB)
• openvpn_2.4.0-5ubuntu2_s390x.deb (445.3 KiB)
• openvpn_2.4.0.orig.tar.gz (1.3 MiB)