[ubuntu/mantic-security] openvpn 2.6.5-0ubuntu1.2 (Accepted)
Marc Deslauriers
marc.deslauriers at canonical.com
Tue Jul 2 13:36:11 UTC 2024
openvpn (2.6.5-0ubuntu1.2) mantic-security; urgency=medium
* SECURITY UPDATE: client can circumvent management client-kill
- debian/patches/CVE-2024-28882.patch: only schedule_exit() once in
src/openvpn/forward.*, src/openvpn/push.c.
- CVE-2024-28882
* SECURITY UPDATE: malicious peer can DoS or send garbage to logs
- debian/patches/CVE-2024-5594.patch: properly handle null bytes and
invalid characters in control messages in src/openvpn/buffer.*,
src/openvpn/forward.c, tests/unit_tests/openvpn/test_buffer.c.
- CVE-2024-5594
Date: 2024-06-27 19:06:17.699076+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/openvpn/2.6.5-0ubuntu1.2
-------------- next part --------------
Sorry, changesfile not available.
More information about the mantic-changes
mailing list