Format: 1.8 Date: Thu, 22 Jun 2017 08:37:49 -0400 Source: openvpn Binary: openvpn Architecture: arm64 arm64_translations Version: 2.4.0-4ubuntu1.3 Distribution: zesty Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: openvpn - virtual private network daemon Changes: openvpn (2.4.0-4ubuntu1.3) zesty-security; urgency=medium . * SECURITY UPDATE: Remotely-triggerable ASSERT() on malformed IPv6 packet - debian/patches/CVE-2017-7508.patch: remove assert in src/openvpn/mss.c. - CVE-2017-7508 * SECURITY UPDATE: Remote-triggerable memory leaks - debian/patches/CVE-2017-7512.patch: fix leaks in src/openvpn/ssl_verify_openssl.c. - CVE-2017-7512 * SECURITY UPDATE: Pre-authentication remote crash/information disclosure for clients - debian/patches/CVE-2017-7520.patch: prevent two kinds of stack buffer OOB reads and a crash for invalid input data in src/openvpn/ntlm.c. - CVE-2017-7520 * SECURITY UPDATE: Potential double-free in --x509-alt-username and memory leaks - debian/patches/CVE-2017-7521.patch: fix double-free in src/openvpn/ssl_verify_openssl.c. - CVE-2017-7521 * SECURITY UPDATE: DoS in establish_http_proxy_passthru() - debian/patches/establish_http_proxy_passthru_dos.patch: fix null-pointer dereference in src/openvpn/proxy.c. - No CVE number Checksums-Sha1: c5402369628ba154bf827ba9fc81521409b753cf 874942 openvpn-dbgsym_2.4.0-4ubuntu1.3_arm64.ddeb 54bedf407db47f8f46ebed85da3da2db7327b177 438212 openvpn_2.4.0-4ubuntu1.3_arm64.deb cc514b7e4033548e9a80667a4afe4bdef8724769 27529 openvpn_2.4.0-4ubuntu1.3_arm64_translations.tar.gz Checksums-Sha256: 2eab4ce16dcd67ebf6c40bdd1a444365201c7f400a7a8d5d5d580efad817eb8b 874942 openvpn-dbgsym_2.4.0-4ubuntu1.3_arm64.ddeb a19f3652b38d8934487f127ad0de11d972c7b802891bd58f64e38070291f9758 438212 openvpn_2.4.0-4ubuntu1.3_arm64.deb 31c9fd9465e2f516f0339e0dc58e66679a5b18ff4350244652af120eb9c0bb14 27529 openvpn_2.4.0-4ubuntu1.3_arm64_translations.tar.gz Files: fa0902bbbc33952a2a8421a268c0342b 874942 net extra openvpn-dbgsym_2.4.0-4ubuntu1.3_arm64.ddeb 738c3b96332355ae3be43f222ddc5075 438212 net optional openvpn_2.4.0-4ubuntu1.3_arm64.deb aaeb5d5b706477bf76a1ff6eaf7c50af 27529 raw-translations - openvpn_2.4.0-4ubuntu1.3_arm64_translations.tar.gz Original-Maintainer: Alberto Gonzalez Iniesta