openvpn 2.4.0-4ubuntu1.3 source package in Ubuntu

Changelog

openvpn (2.4.0-4ubuntu1.3) zesty-security; urgency=medium

  * SECURITY UPDATE: Remotely-triggerable ASSERT() on malformed IPv6 packet
    - debian/patches/CVE-2017-7508.patch: remove assert in
      src/openvpn/mss.c.
    - CVE-2017-7508
  * SECURITY UPDATE: Remote-triggerable memory leaks
    - debian/patches/CVE-2017-7512.patch: fix leaks in
      src/openvpn/ssl_verify_openssl.c.
    - CVE-2017-7512
  * SECURITY UPDATE: Pre-authentication remote crash/information disclosure
    for clients
    - debian/patches/CVE-2017-7520.patch: prevent two kinds of stack buffer
      OOB reads and a crash for invalid input data in src/openvpn/ntlm.c.
    - CVE-2017-7520
  * SECURITY UPDATE: Potential double-free in --x509-alt-username and
    memory leaks
    - debian/patches/CVE-2017-7521.patch: fix double-free in
      src/openvpn/ssl_verify_openssl.c.
    - CVE-2017-7521
  * SECURITY UPDATE: DoS in establish_http_proxy_passthru()
    - debian/patches/establish_http_proxy_passthru_dos.patch: fix
      null-pointer dereference in src/openvpn/proxy.c.
    - No CVE number

 -- Marc Deslauriers <email address hidden>  Thu, 22 Jun 2017 08:37:49 -0400

Upload details

Uploaded by:
Marc Deslauriers on 2017-06-22
Uploaded to:
Zesty
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
net
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
openvpn_2.4.0.orig.tar.gz 1.3 MiB f21db525b3c03a9bbd0a7ab6d0e4fbaf8902f238bf53b8bc4e04f834e4e7caa4
openvpn_2.4.0-4ubuntu1.3.debian.tar.xz 62.0 KiB 6f537753612fef649cb2a2b2a2c9b8fddc17723b28154a3bbe0842f9825b3075
openvpn_2.4.0-4ubuntu1.3.dsc 2.1 KiB 7a6df6a97f84fc09129650e81b007865a3ced27ceddca94ffbc49bcab7105edc

View changes file

Binary packages built by this source

openvpn: No summary available for openvpn in ubuntu zesty.

No description available for openvpn in ubuntu zesty.

openvpn-dbgsym: No summary available for openvpn-dbgsym in ubuntu zesty.

No description available for openvpn-dbgsym in ubuntu zesty.