Format: 1.8 Date: Thu, 22 Jun 2017 08:37:49 -0400 Source: openvpn Binary: openvpn Architecture: amd64 amd64_translations Version: 2.4.0-4ubuntu1.3 Distribution: zesty Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: openvpn - virtual private network daemon Changes: openvpn (2.4.0-4ubuntu1.3) zesty-security; urgency=medium . * SECURITY UPDATE: Remotely-triggerable ASSERT() on malformed IPv6 packet - debian/patches/CVE-2017-7508.patch: remove assert in src/openvpn/mss.c. - CVE-2017-7508 * SECURITY UPDATE: Remote-triggerable memory leaks - debian/patches/CVE-2017-7512.patch: fix leaks in src/openvpn/ssl_verify_openssl.c. - CVE-2017-7512 * SECURITY UPDATE: Pre-authentication remote crash/information disclosure for clients - debian/patches/CVE-2017-7520.patch: prevent two kinds of stack buffer OOB reads and a crash for invalid input data in src/openvpn/ntlm.c. - CVE-2017-7520 * SECURITY UPDATE: Potential double-free in --x509-alt-username and memory leaks - debian/patches/CVE-2017-7521.patch: fix double-free in src/openvpn/ssl_verify_openssl.c. - CVE-2017-7521 * SECURITY UPDATE: DoS in establish_http_proxy_passthru() - debian/patches/establish_http_proxy_passthru_dos.patch: fix null-pointer dereference in src/openvpn/proxy.c. - No CVE number Checksums-Sha1: 9467b3fd7a479db81a1548eb0631383762ccdc72 873704 openvpn-dbgsym_2.4.0-4ubuntu1.3_amd64.ddeb 2abda8bf10a176464250a27ae00ea458b804be1a 488350 openvpn_2.4.0-4ubuntu1.3_amd64.deb 2f68fb4d8424cb6531f60c078ae69f5d759e8a5b 27395 openvpn_2.4.0-4ubuntu1.3_amd64_translations.tar.gz Checksums-Sha256: ea31fa1b8dfb66f06072253536826a7e56869bb2cfe2adda345b82d488df5589 873704 openvpn-dbgsym_2.4.0-4ubuntu1.3_amd64.ddeb 86d6560d2c81bfee72032a4a690038d5a3923c5486ac33e5bbc5fb7e67454124 488350 openvpn_2.4.0-4ubuntu1.3_amd64.deb fd1cfca879f4d810024b19a50f07d12570ee31a93ac65833d83d5eb265da23af 27395 openvpn_2.4.0-4ubuntu1.3_amd64_translations.tar.gz Files: 76aab673f4c1ccf27fb997ffb9489a2c 873704 net extra openvpn-dbgsym_2.4.0-4ubuntu1.3_amd64.ddeb 6b03841e69db3e3bacb92240f4186dd9 488350 net optional openvpn_2.4.0-4ubuntu1.3_amd64.deb 7bfd6a6d2d25ffcb9c67c66666f1cb3c 27395 raw-translations - openvpn_2.4.0-4ubuntu1.3_amd64_translations.tar.gz Original-Maintainer: Alberto Gonzalez Iniesta