[ubuntu/noble-proposed] openvpn 2.6.12-0ubuntu0.24.04.1 (Accepted)

Lena Voytek lena.voytek at canonical.com
Wed Oct 2 19:10:38 UTC 2024


openvpn (2.6.12-0ubuntu0.24.04.1) noble; urgency=medium

  * New upstream release 2.6.12 (LP: #2073318):
    - CVE Fixes:
      + CVE-2024-4877, CVE-2024-5594, CVE-2024-28882, CVE-2024-27459,
        CVE-2024-24974, CVE-2024-27903
    - Updates:
      + Allow trailing \r and \n in control channel message
      + Implement --server-poll-timeout on SOCKS proxies
      + Implement Windows CA template match for Crypto-API selector
      + Update sample configuration files
      + Update systemd unit file documentation references
    - Bug Fixes Include:
      + Fix issue with proxy credentials caching
      + Fix LibreSSL crashing when enumerating digests/cipher with workaround
      + Use snprintf instead of sprintf for get_ssl_library_version
      + Fix disabling DCO when proxy is set via management interface
      + See https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn26 for
        additional bug fixes and information
  * Remove patches fixed upstream:
    - d/p/systemd.patch
    [Fixed in 2.6.10]
    - d/p/CVE-2024-28882.patch
    - d/p/CVE-2024-5594.patch
    [Fixed in 2.6.11]

Date: Tue, 17 Sep 2024 10:27:52 -0700
Changed-By: Lena Voytek <lena.voytek at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/openvpn/2.6.12-0ubuntu0.24.04.1
-------------- next part --------------
Format: 1.8
Date: Tue, 17 Sep 2024 10:27:52 -0700
Source: openvpn
Built-For-Profiles: noudeb
Architecture: source
Version: 2.6.12-0ubuntu0.24.04.1
Distribution: noble
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Lena Voytek <lena.voytek at canonical.com>
Launchpad-Bugs-Fixed: 2073318
Changes:
 openvpn (2.6.12-0ubuntu0.24.04.1) noble; urgency=medium
 .
   * New upstream release 2.6.12 (LP: #2073318):
     - CVE Fixes:
       + CVE-2024-4877, CVE-2024-5594, CVE-2024-28882, CVE-2024-27459,
         CVE-2024-24974, CVE-2024-27903
     - Updates:
       + Allow trailing \r and \n in control channel message
       + Implement --server-poll-timeout on SOCKS proxies
       + Implement Windows CA template match for Crypto-API selector
       + Update sample configuration files
       + Update systemd unit file documentation references
     - Bug Fixes Include:
       + Fix issue with proxy credentials caching
       + Fix LibreSSL crashing when enumerating digests/cipher with workaround
       + Use snprintf instead of sprintf for get_ssl_library_version
       + Fix disabling DCO when proxy is set via management interface
       + See https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn26 for
         additional bug fixes and information
   * Remove patches fixed upstream:
     - d/p/systemd.patch
     [Fixed in 2.6.10]
     - d/p/CVE-2024-28882.patch
     - d/p/CVE-2024-5594.patch
     [Fixed in 2.6.11]
Checksums-Sha1:
 e6f1fb3f9e13f25ad9cab1840d8247af3f8e7fee 2366 openvpn_2.6.12-0ubuntu0.24.04.1.dsc
 dd564a08b6275b1f49256d5a78df2edf5e873c4a 1912400 openvpn_2.6.12.orig.tar.gz
 5ef8b76d4e97aecf5937fef5cec17dd2bb396c87 64940 openvpn_2.6.12-0ubuntu0.24.04.1.debian.tar.xz
 d65229191ca2bd09b2f2f6ae559b43cb6eb985fe 7005 openvpn_2.6.12-0ubuntu0.24.04.1_source.buildinfo
Checksums-Sha256:
 91d3ec4f9a08b4dca36a7889c1fb041b99c539d779d413b2dc89d927c9b9a76f 2366 openvpn_2.6.12-0ubuntu0.24.04.1.dsc
 1c610fddeb686e34f1367c347e027e418e07523a10f4d8ce4a2c2af2f61a1929 1912400 openvpn_2.6.12.orig.tar.gz
 3b789e045d88075babdddfd9104f33328e02fabf7a7c5ecca8a26d6b91c16ff5 64940 openvpn_2.6.12-0ubuntu0.24.04.1.debian.tar.xz
 2ed6cb95432bd7a5918df80a38f9b26a7c2cba614eb6274b1abb0233a60b8e0c 7005 openvpn_2.6.12-0ubuntu0.24.04.1_source.buildinfo
Files:
 09272ce9dec54130811472b9b5da76f1 2366 net optional openvpn_2.6.12-0ubuntu0.24.04.1.dsc
 448e5315d24507ba70d4a0d573971765 1912400 net optional openvpn_2.6.12.orig.tar.gz
 afc0ad0938737e1864844257410bf382 64940 net optional openvpn_2.6.12-0ubuntu0.24.04.1.debian.tar.xz
 df00dd0e8fd78b7779cfb11db96fde92 7005 net optional openvpn_2.6.12-0ubuntu0.24.04.1_source.buildinfo
Original-Maintainer: Bernhard Schmidt <berni at debian.org>
Vcs-Git: https://git.launchpad.net/~lvoytek/ubuntu/+source/openvpn
Vcs-Git-Commit: 0ce92ba4affd6c1a2356b630f6c2c13192171845
Vcs-Git-Ref: refs/heads/backport-2.6.12-noble


More information about the noble-changes mailing list