[ubuntu/vivid-proposed] openvpn 2.3.2-9ubuntu2 (Accepted)

Marc Deslauriers marc.deslauriers at ubuntu.com
Mon Dec 1 22:19:17 UTC 2014


openvpn (2.3.2-9ubuntu2) vivid; urgency=medium

  * SECURITY UPDATE: server denial of service via too-short control channel
    packets
    - debian/patches/CVE-2014-8104.patch: drop too-short control channel
      packets instead of asserting out in src/openvpn/ssl.c.
    - CVE-2014-8104
  * debian/patches/update_certs.patch: update test certs to fix FTBFS.

Date: Mon, 01 Dec 2014 15:26:58 -0500
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/openvpn/2.3.2-9ubuntu2
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 01 Dec 2014 15:26:58 -0500
Source: openvpn
Binary: openvpn
Architecture: source
Version: 2.3.2-9ubuntu2
Distribution: vivid
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description:
 openvpn    - virtual private network daemon
Changes:
 openvpn (2.3.2-9ubuntu2) vivid; urgency=medium
 .
   * SECURITY UPDATE: server denial of service via too-short control channel
     packets
     - debian/patches/CVE-2014-8104.patch: drop too-short control channel
       packets instead of asserting out in src/openvpn/ssl.c.
     - CVE-2014-8104
   * debian/patches/update_certs.patch: update test certs to fix FTBFS.
Checksums-Sha1:
 36b344b4fd3ae927ddd8eaa1940fb64889fec036 1958 openvpn_2.3.2-9ubuntu2.dsc
 bbf3cc5690ce71bc0cb20e261cb3d441abc94a8e 123588 openvpn_2.3.2-9ubuntu2.debian.tar.xz
Checksums-Sha256:
 2345eeaba1d17e241fca9684f5cd3ca73b41ddade2a63a6327deef574acd5028 1958 openvpn_2.3.2-9ubuntu2.dsc
 532aebebe475685e6a845d7041912508dc2eabbee14c2318f4595f97737651ed 123588 openvpn_2.3.2-9ubuntu2.debian.tar.xz
Files:
 079f9e5a840cd3b630655d39ca214b60 1958 net optional openvpn_2.3.2-9ubuntu2.dsc
 9e773c95124587b348d03d6b40788309 123588 net optional openvpn_2.3.2-9ubuntu2.debian.tar.xz
Original-Maintainer: Alberto Gonzalez Iniesta <agi at inittab.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=T2Sy
-----END PGP SIGNATURE-----


More information about the Vivid-changes mailing list